Newly created users coming from an external identity providers will also be created in the directory. They also have a setting called "block sign-in".
It seems that this is not honored in my directories, only for local users. I can sign in with users marked as "blocked".
Additionally, it seems that the default for all of my users currently "block" which is wrong.
Is this working as designed?