-
-
Notifications
You must be signed in to change notification settings - Fork 889
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Lockout attempts policy #11762
Labels
enhancement
New feature or request
Comments
Preventing users from setting their password to a password they've used in the past would also be a great addition if they need to change their password, or if their password has expired. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Is your feature request related to a problem? Please describe.
To reduce the effectiveness of attempts to compromise a user account, things like preventing an account from logging in if enough failed login attempts have been made would be great.
Describe the solution you'd like
A policy that can be attached to an identification stage, that prevents further logins on a user account if a specified limit has been reached, within a specified amount of time, and preventing logins for a specified amount of time would be great.
The text was updated successfully, but these errors were encountered: