For Locked provisioning user the attribute eTLocked will be set to value of 1. For Suspended provisioning user the attribute eTSuspended will be set to value 1. So you could bind directly into the Provisioning Repository layer to review these two fields and take action as needed. For further assistance I would suggest opening a support case.