diff --git a/pkg/keystone/models/identity_provider.go b/pkg/keystone/models/identity_provider.go
index 876e05210a..e7d1a251fc 100644
--- a/pkg/keystone/models/identity_provider.go
+++ b/pkg/keystone/models/identity_provider.go
@@ -1481,6 +1481,9 @@ func (idp *SIdentityProvider) PerformDisable(
 	query jsonutils.JSONObject,
 	input apis.PerformDisableInput,
 ) (jsonutils.JSONObject, error) {
+	if idp.Driver == api.IdentityDriverSQL {
+		return nil, errors.Wrap(httperrors.ErrForbidden, "not allow to disable sql idp")
+	}
 	if idp.Driver == api.IdentityDriverLDAP || idp.AutoCreateUser.IsTrue() {
 		domains, _ := idp.getLinkedDomains()
 		for i := range domains {