Support to selectively enable or disable login access to applications.

[VivekVinushanth]

Is your feature request related to a problem? Please describe.
In CIAM solutions, there's a need to selectively disable application access for users for various reasons, like security concerns or compliance requirements. Currently, Identity server do not has this support.

Describe the solution you would prefer
Add support to selectively enable and disable application login access through Application Mgt API

Phase 1

• BackEnd and API capability to enable/disable user login/access for an application
• Administrative UI in the Console to enable/disable Myaccount at the organization level

Phase 2

• Session termination , consent and active token revocation while disabling the access

Support

• Documentation update for application mgt api #20387
• Migration

[VivekVinushanth]

Phase 1 deliverables are added with:

• API support:

  • Support applicationAccessEnabled carbon-identity-framework#5701
  • change flag name carbon-identity-framework#5711
  • Add support for applicationAccessEnabled identity-api-server#612
  • Update SP method names identity-api-server#617

• BE support:

  • Block access for apps ifAccessDisabled carbon-identity-framework#5707
  • OAuth component :Add support to prevent access to applications wso2-extensions/identity-inbound-auth-oauth#2465
  • Update SP method names wso2-extensions/identity-inbound-auth-oauth#2480
  • Add constant to i18n map carbon-identity-framework#5728

• UI:

  • Add app access disabled error message identity-apps#6279
  • Add support to enable/Disable Application Access identity-apps#6335
  • update error messages for disabled application access identity-apps#6356
  • Support for disable myAccount identity-apps#6360

[VivekVinushanth]

This introduces a change to the application mgt APIs and hence require documentation update.

[VivekVinushanth]

Phase 2:

• Delete consent receipts  carbon-identity-framework#5732
• Revoke token when app is disabled wso2-extensions/identity-inbound-auth-oauth#2484
• Add applicationEnabled for required attributes identity-api-server#620