How to Disable user account after 5 consecutive failed login attempts using Keycloak

user_12319659 0
Viewed 3749

I have a use case where user should be disabled when he enter wrong password 5 consecutive times. I cant find any keycloak password policy to disable user when he enter wrong password 5 consecutive times.

keycloak
2 Answers

To enable Consecutive Failed Login Defence you need to enable "Max Login Failures" from Brute Force Detection. Steps:

  1. Login to Keycloak Admin Console
  2. Select Realms from List
  3. Go To Realm Settings >> Security Defenses >> Brute Force Detection
  4. Enable Brute Force Detection
  5. Set Max Login Failures to 5

Refer screenshot for stepsenter image description here

user_57904980

Go to Your Realm > Realm Settings > Security Defenses > Brute Force Detection and enable it. Inside the Brute Force Detection page you will find many options, the ones you are interested in are "Max Login Failures" and "Permanent Lockout"

user_113914140
Related