A configuration setting on a person resource in the ILM database that restricts that person from authenticating to ILM or performing a password reset.