shibboleth authentication fails to see changed student status #2827
Description
When using Shibboleth authentication, a student who has their status reset from "C" to "D" but has an ongoing credential from the Shibboleth server can continue to connect to and work WeBWorK problems. I thought that we addressed this in WeBWorK 2.17 or 2.18, but haven't found where it is. The short version of this is that when a student has valid Shibboleth authentication the student's status is never re-checked, so that the changed status never affects their ability to log in.