Interested in a ServiceNow event built for developers? Registration for now[dev]26 is officially open!

limit number of token attempts in One-Time Passcode (OTP) sent by email

AgnesQua
Tera Contributor

Is there an OOTB setting that can limit how many times user can input the passcode received by email.

 

We can set up the time in which token expires, but this does not help against brute force attack when even in this limited time many combinations can be tried. 

 

I need a way to set some max retries number for one token, is it possible ?

0 REPLIES 0