Normal Pure Login - Too Many Login AttemptsNormal Pure Login - Too Many Login Attempts

What

A user can either log in directly through a username and password or through external authentication. 
If the user has a direct login and fails to log in with too many attempts, they'll get this message when trying to log in: 

Login attempt is denied due to too many login attempts, try again later       

Why

This behaviour applies to the Normal Pure Login (form based login). 
Users will temporary be locked out of Pure due to bad credentials after 3 attempts. 
On the 4th attempt they will be locked out for 16 sec. (2^4). 
If they try a 5th time they will be locked for 32 sec. (2^5) etc.

Note: This logic and time length cannot be customised.

How

• The user should wait and try again.
• If the user do not remember the password, then a local Pure administrator can reset the users password, which will push a 'generate new password'-email to the user. 
  Note: This is only for users not externally authenticated and using Single Sign On (SSO).  

If someone gets this message and blocked login period after trying to log in with a different user, it might be that Pure doesn't allow for a lot of login attempts with different users on either the same IP or browser.  
For these cases:

• Wait 10 minutes and log in with that (other) user.
• If the user still cannot log in, then try another browser.
• If the issue persists, then Pure doesn't allow for a lot of login attempts with different users on the same IP.
  • Try to log in on a different device.

More information

Note: Some of this information is for internal use only and might not be accessible.