PicketLink IDM Feature Enhancement: Failed Logins

[anil.saldhana]

Bolek, one of the feature requests at the JUDCon session on GateIn (driven by Thomas) was the addition of ability to handle failed logins configuration as part of the identity model for GateIn.

I am just starting this thread to capture this feature request and probably request you to create a JIRA, if suitable.

[bdaw]

Could you describe more the usecase?

[anil.saldhana]

GateIn or other system.  There may be a policy for how many times a login attempt can fail. If greater than certain attempts, lock the account.

Typically this lock in policy may be part of the ldap attribute.  But it will be cool for the IDM framework to model/account for this feature.

[bdaw]

Sounds good but my concern is how much "logic" should be put inside IDM. People are also asking about putting security kind of logic which I would like to keep outside of the core framework. Such feature would probably fit into some kind of callback mechanism which would enable to add pluggable logic.