IDP action that places a temporary access block on the current user, or, on a failed login attempt, on the username that was attempted, preventing further logins or requests for a configured number of minutes. Blocks the currently authenticated profile if the request carries authorisation, or the failed-login username recorded on the request attributes otherwise; does nothing if the entity cannot be identified or already has an active block. When no block duration is configured the block does not expire on its own. Runs the same way whether triggered during filter-chain evaluation or after authorisation.

Group: IDP Rules

Implements: IDPAction

Properties

Methods

getBlockForMins()

Returns: Integer

The configured block duration in minutes, counted from the moment the block is created.