In the Galaxy config file config/galaxy.ini there is the user activation setting that you Unless the Grace period (see below) is set, the user won't be able to login .