Is there a way to report on users that have been locked out due to too many failed login attempts?

Russ Hancock
Tera Expert

I am trying to determine if there is a way to either report on (or trigger an Email notification for) users that have failed to log in a set number of times, and are thus locked out.

1 ACCEPTED SOLUTION

darius_koohmare
ServiceNow Employee
ServiceNow Employee

Sure thing Russell. Create an email notification on the User table whenever 'locked out' 'changes to' 'true'. You can email the users manager, the users email on their account, etc.



There are system properties that control the # of failed attempts for lockout, found here: Specify lockout for failed login attempts


View solution in original post

6 REPLIES 6

Ahh got it.


The only similar concept top of mind would be enabling auditing on the user table and then searching sys_history_set for updates to the 'locked out' field.


That sounds like another good potential solution, thanks Darius!