Lock Q&A Profile
If you want to lock the user’s Questions and Answers profile after several failed authentication attempts, place the Lock Q&A profile activity before the Restart workflow if error occurs activity in a workflow. The Lock Q&A profile activity locks the profile when the total number of attempts to authenticate the user by using any of the following activities equals or exceeds the lockout threshold value:
•Authenticate with Q&A profile
•Authenticate via phone
•Authenticate with passcode
By default, the Lock Q&A profile activity is included in the Forgot My Password and Unlock My Account workflows.
This activity has the following settings:
•Lockout duration. Specify the number of minutes the profile remains locked out before automatically becoming unlocked.
•Lockout threshold. Specify the number of failed authentication attempts that will cause a the profile to be locked out.
•Reset account lockout counter after. Specify the number of minutes that must elapse from the time a user fails to authenticate before the failed authentication attempt counter is reset to 0 bad authentication attempts.
IMPORTANT: If the user’s Q&A profile gets locked, all tasks on the Self-Service site will be unavailable for
the user. In this case, the user must contact help desk to obtain a passcode and unlock the Q&A profile.