Hi, How can I block users and disable them to login?

You could do that by updating the identity to have an

inactive

state, as inactive identities can't log into the system. This can be done via the endpoint

/admin/identities