I'm probably missing something obvious, here, and just not phrasing my searches of the Guide correctly, but what's the best way to lock user accounts? I have some administrative holds, adjuncts who aren't currently under contract but may teach again, etc., whose access I need to temporarily disable without the side effects of deleting. I don't want information to disappear; I just need them to not be able to login.
For most users we use SSO, and that's easy: we disable them in AD. But we also have a class of users with Canvas-only accounts using native login, and that's less obvious: if I just change their passwords they can reset them.