Update: Microsoft will be moving away from UserVoice sites on a product-by-product basis throughout the 2021 calendar year. We will leverage 1st party solutions for customer feedback. Learn more here.

I suggest you ...

← (General Feedback)

Prevent Account Lockout due to Brute Force Attack

Currently Azure Active Directory is locking Office 365 user accounts based on the number of failed sign-ins. If the user credentials are entered incorrectly, it does not check or verify existing Azure Conditional Access Policy, whether this account can sign-in from that location (Country or IP address) or not, because the authentication was not successful.

To prevent Azure AD account lockouts, can you design the Modern Authentication system in Azure AD to check for existing Azure Conditional Access Policy for failed logins coming from blocked locations (Country or IP address)?

This will help Office 365 Admins prevent account lockouts, sourced from known brute force attack locations.

73 votes
Vote

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
You have left! (?) (thinking…)
Faisal Nahian shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

4 comments

We're glad you're here

Please sign in to leave feedback
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment

(General Feedback): azure.microsoft.com

Categories

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice