I'm running Confluence 3.5.13.
I've got SSO authentication against our Active Directory forest working using the NTLMv2 plugin from TechTime.
Users with an active account in Confluence are logged in automatically, and users with no account can browse spaces as anonymous. No problem here.
There is an issue, though, with users who have an account in the Confluence database which has been disabled. Whatever they try to access they get a page which says, "You are not permitted to perform this action".
My question is this: Is it possible to configure Confluence so that a person with a disabled account is able to browse as an anonymous user can?
Deleteing the user's account is not feasible due to references from content they have contributed in the past. They can log out, but as soon as they go to another page the SSO authenticates them again and they're denied access.
I think I need a way to give users with disabled accounts the "Use Confluence" global permission while maintaining their disabled status for other purposes.
I've posted theis question on Atlassian's forums as well, so the race is on for a good answer. ;-)