[keycloak-user] Limit users to 3 password trials

Bill Burke bburke at redhat.com
Fri Oct 17 08:37:34 EDT 2014


Actually, we do have brute force attack prevention.  DOn't see any 
reason why you couldn't lower the threshold to 3 instead of the default 
of 30.

On 10/17/2014 4:31 AM, Alexander Chriztopher wrote:
> Hi Bill and thanks for the answer.
>
> I have created the following JIRA issue :
> https://issues.jboss.org/browse/KEYCLOAK-764
>
> Hope to see this feature implemented in a near release as it is used by
> a lot of companies right now.
>
> On Wed, Oct 15, 2014 at 10:49 PM, Bill Burke <bburke at redhat.com
> <mailto:bburke at redhat.com>> wrote:
>
>     No.  Log a jira please.
>
>     On 10/15/2014 3:02 PM, Alexander Chriztopher wrote:
>      > Hi,
>      >
>      > Was just wondering wether this is possible natively in Keycloak.
>      >
>      > Thanks for any help.
>      >
>      >
>      > _______________________________________________
>      > keycloak-user mailing list
>      > keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
>      > https://lists.jboss.org/mailman/listinfo/keycloak-user
>      >
>
>     --
>     Bill Burke
>     JBoss, a division of Red Hat
>     http://bill.burkecentral.com
>     _______________________________________________
>     keycloak-user mailing list
>     keycloak-user at lists.jboss.org <mailto:keycloak-user at lists.jboss.org>
>     https://lists.jboss.org/mailman/listinfo/keycloak-user
>
>

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


More information about the keycloak-user mailing list