heartcombo / devise

Flexible authentication solution for Rails with Warden.
http://blog.plataformatec.com.br/tag/devise/
MIT License
23.89k stars 5.54k forks source link

Lockable strategy is account based instead of authentication strategy based #5700

Closed bart-westenenk-bex closed 1 month ago

bart-westenenk-bex commented 1 month ago

Pre-check

Environment

Current behavior

Currently, an account that is setup using SSO will get locked if too many username password attempts have been tried. If one would then try to login using SSO (like Google) the user is still locked out of their account.

Expected behavior

When locked out of your account based on username and password, login using SSO should still work.