A common oversight is that the black list is not enabled for all ID Services that you are using. Each ID Service has its own black list.