Shibboleth Developers

[Christopher Bongaarts <>]

Has anyone implemented an "attack lock" (X failed password attempts 
without a success in Y minutes locks out further attempts for Z minutes) 
for the IdP?

If not, would the StorageService be a good place to keep the necessary 
state?
--
%%  Christopher A. Bongaarts   %%  

          %%
%%  OIT - Identity Management  %%  http://umn.edu/~cab  %%
%%  University of Minnesota    %%  +1 (612) 625-1809    %%