Hi DHR,

Yes I tried setting locked to true as follows:

curl --request PATCH \
  --url http://localhost:8081/uaa/Users/0bec1cf1-7ab2-489a-8509-/status \
  --header 'Accept: application/json' \
  --header 'Authorization: Bearer fd76944bb1534edda25a5a0962431be1' \
  --header 'Content-Type: application/json' \
  --data '{
  "locked" : true
}'

But I am getting following error response:

{
  "error_description": "Cannot set user account to locked. User accounts only become locked through exceeding the allowed failed login attempts.",
  "error": "scim",
  "message": "Cannot set user account to locked. User accounts only become locked through exceeding the allowed failed login attempts."
}