Suspended users due to incorrect userid and/or password

[Damian Roberts]

How many times does a user have to correctly enter their userid and password before they are suspended?  Can this number be amended?

[Victor]

@Damian Roberts there is no restriction nor limit (before a user is suspended) on how many times users can input their userid/password correctly.

[Damian Roberts]

Hi.  Thanks.  Another question.  Why would a user's status change from Active to Suspended?  We have assumed this is because they have incorrectly added their userid or password too many times.  Thanks, Damian

[Victor]

@Damian Roberts if the user enters an incorrect password a number of times specified in the security.user.lockout.failedLoginAttempts.threshold system setting their account is suspended (locked) for the duration specified in the security.user.lockout.duration (minutes) system setting. If the security.user.lockout.type is set to "permanent" the account/user is suspended indefinitely and must be actioned manually if it needs to be re-activated.

[Damian Roberts]

Thank you