As of right now, after a user has 10 failed login attempts their account will be locked. The user will have to wait one hour from the last failed attempt to either try again or reset their password.
User would like to request that this messaging pop up for users who are in this situation. That way they know that they have to wait one hour to do anything. This would hopefully reduce the calls to admins and thus to Support.
Employee Name | Jessica Schildwachter |
Client Name "shard name" | utifoundation, mhcc |
User | System Admin , Applicant |
Functional Unit | Users, Text Change |
UC San Diego would also like this (ucsd-research)!
I think it would also be very helpful to have an automated email message that could be sent to users when their account is locked. I know it may be a security issue to have a pop up on the login page telling them their account is locked. With an email message, we could warn them that someone is trying to access their account; we could explain their account will unlock automatically in one hour; and we could explain how they can reset their password.
Mt Hood would also like this! (MHCC)