Configure your lockout policy

With the Lockout policy, you can block users who consecutively failed to log in a defined number of times.
To define your lockout policy, configure the following settings:

In Max Attempts, accept the default number of 5 allowed login attempts or enter another value.

If the user exceeds this number, their account is automatically locked-out.
In Lockout Duration, accept the default lockout time of 180 seconds or enter another value that defines how long the locked-out user account should remain blocked.

You can select Never Unlock if you want the user account to remain locked-out. If this setting is selected, the locked-out user won't be able to log in and will have to contact the IT department to request their account to be unlocked.

How to

In the Enterprise Center navigation menu, select Multi-factor Authentication > Policies.
On the Policies page, navigate to the policy that you want to edit and click the policy's name to display its settings.
The policy configuration page displays.
In the sidebar menu, select Lockout to enable the edition of these settings.
In the Lockout area, accept the default number of Max Attempts and time of the Lockout Duration, or provide other values.
Click Save & Deploy.

This overwrites and saves your newly added lockout configuration.