How to lock the user’s Questions and Answers profile after several failed authentication attempts (4216354)

WORKAROUND

To lock the user’s Questions and Answers profile after several failed authentication attempts, place the Lock Q&A Profile activity before the Restart workflow if error occurs activity in a workflow.

The Lock Q&A profile activity locks the profile when the total number of attempts to authenticate the user by using any of the following activities equals or exceeds the lockout threshold value:

• Authenticate with Q&A profile
• Authenticate via Phone
• Authenticate with passcode

By default, the Lock Q&A profile activity is included in the Forgot My Password and Unlock My Account workflows.

This activity has the following settings:

• Lockout duration - Specify the number of minutes the profile remains locked out before automatically becoming unlocked.
• Lockout threshold - Specify the number of failed authentication attempts that will cause a the profile to be locked out.
• Reset account lockout counter after - Specify the number of minutes that must elapse from the time a user fails to authenticate before the failed authentication attempt counter is reset to 0 bad authentication attempts.

IMPORTANT: If the user’s Q&A profile gets locked, all tasks on the Self-Service site will be unavailable for the user. In this case, the user must contact help desk to obtain a passcode and unlock the Q&A profile.