Starting this thread to discuss a feature to automatically disable users who have been inactive for the last X days. This can help mitigate potential security risks by preventing attacks on dormant user accounts.

Proposed Implementation:

1. Configuration in Realm Settings - Allow administrators to define the inactivity threshold.
2. Scheduled Task - A cron job that runs daily to identify and disable inactive users.
3. User Notifications - Send email alerts to users when their accounts are disabled.
4. Reactivation Flow - A self-service mechanism where users receive an email with a link to re-enable their account in the Realm.

This feature would help reduce brute-force attempts on inactive user accounts and enhance overall security.

Let us know your thoughts on this.