Reference Guide › Audit Log Records › Authorization Stage Codes for Log In and Log Out Events › 5—User suspend checking
Indicates that CA Access Control denied login, because the user account is suspended.