Disabled and already locked users receive user account suspension notifications

[pabasara-mahindapala]

Description

When Idle User Account Suspension [1] is configured, disabled and already locked users continue to receive user account suspension notifications. These users are retrieved using the lastLoginTime claim value [2][3] and their disabled and locked status is not considered.

Already locked and disabled users should not receive idle account suspension notifications.

[1] https://is.docs.wso2.com/en/5.10.0/learn/user-account-suspension
[2] https://github.com/wso2-extensions/identity-governance/blob/57e510a61dc9042b55ffa0cbdceb13f508519f3a/components/org.wso2.carbon.identity.account.suspension.notification.task/src/main/java/org/wso2/carbon/identity/account/suspension/notification/task/util/NotificationConstants.java#L34
[3] https://github.com/wso2-extensions/identity-governance/blob/55bf5a45e70cfdf60be2fa27d7b917059058cfc4/components/org.wso2.carbon.identity.account.suspension.notification.task/src/main/java/org/wso2/carbon/identity/account/suspension/notification/task/jdbc/JDBCNotificationReceiversRetrieval.java#L99

Related Issues:
#11243
#21907

Steps to Reproduce

1. Configure Idle User Account Suspension
2. Configure Last Login, Account Locked and Account Disabled claims as "Supported by Default"
3. Manually update the lastLoginTime claim value of a locked or disabled user
4. User receives idle account suspension notifications

Version

IS 5.10.0

Environment Details (with versions)

OS: MacOS
Database: H2
Userstore: JDBC