Password Policy - User Lockout Settings

[krishna_sk]

Hi team,

We have configured the following parameters in the "externalconfig.properties"  file as suggested in the Document portal.(https://docs.saviyntcloud.com/bundle/EIC-Admin-v24x/page/Content/Chapter14-Password-Management/Passw...)

Even after updating the parameters, when we tried logging into Saviynt through Postman with incorrect password for multiple times, we didn't see the Account got locked.

Could you please let us know whether we need to do any other configurational changes anywhere and let us know your insights on this.

Thank you.

[rushikeshvartak]

Above configuration is for user. and does server has been restarted ?

[krishna_sk]

HI @rushikeshvartak 

Yes , we tried after restarting the server only and still seeing the same issue.

Thank you

[rushikeshvartak]

Check password policy under identity repository 

[krishna_sk]

HI @rushikeshvartak 

The below is the Password policy under Identity Repository we have for Users.

Thank you.

[rushikeshvartak]

What is scope its application or user ? Subject says account

[krishna_sk]

Hi @rushikeshvartak

The Scope is for Users. I changed the Subject as well.

Thank you.

[rushikeshvartak]

You can have one user scope policy and multiple application scope policy

[krishna_sk]

@rushikeshvartak  yes, We are having only one user policy. With all the above configurations as well, the user is not getting locked, when we tried to enter incorrect password for more than 3 times.

Thank you.