Minor Description
How to recognize user is disabled by admin or system for this we can extend user login entity and add disabledBy field. We will add user login record into disabledBy field if admin disabled the user and if user disabled by invalid login attempt then this field should be empty.