ilgrosso commented on PR #1411: URL: https://github.com/apache/syncope/pull/1411#issuecomment-4620736634
> Before this change, the account policy threshold was enforced on attempt N + 1: with maxAuthenticationAttempts = 3, the user was still active after 3 failures and suspended only on the 4th failure. maxAuthenticationAttempts = 3 means that the number of authentication attempts allowed to fail is 3, at maximum. So the fact that "the user was still active after 3 failures and suspended only on the 4th failure" is on purpose, not an error. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
