Prevent INTEGRATION user login

Hello,

Anyone have a proven way to prevent a user from logging into the INTEGRATION user account without affecting inbound integrations? The password is visible in the XML so changing it won't help, and it would cause us to change it in the middleware too.

We deactivate users by adding ACR "COMMON" as Not Granted to their accounts. I tried this same approach for the INTEGRATION user and it appears to not interfere with our inbound integrations and subsequent agent flows.

This one makes me nervous so I'd appreciate feedback.

Thanks!