Applies to Product – Power Pages
What’s happening?
Accounts are being blocked for 24 hours after 5 failed login attempts, even though the configuration specifies that accounts should be unblocked after 5 minutes.
Reason:
The underlying cause of this is related to the configuration settings for account lockout in the system. The default parameters for account lockout may not have been set correctly, leading to the extended lockout period.
Resolution:
Verify the current configuration settings for account lockout in the system.
Check the following parameters:
- Authentication/LoginThrottling/IpAddressTimeoutTimeSpan
- Authentication/UserManager/DefaultAccountLockoutTimeSpan
- Ensure that the DefaultAccountLockoutTimeSpan is set to the desired value (5 minutes) to prevent accounts from being locked for 24 hours.
- If necessary, update the parameters to reflect the correct settings as per the documentation.
- For further assistance, refer to the documentation on user account lockout settings available on the Microsoft Learn website.