heartcombo / devise

Flexible authentication solution for Rails with Warden.
http://blog.plataformatec.com.br/tag/devise/
MIT License
24.01k stars 5.55k forks source link

Lockable strategy is account based instead of authentication strategy based #5700

Closed bart-westenenk-bex closed 4 months ago

bart-westenenk-bex commented 4 months ago

Pre-check

Environment

Current behavior

Currently, an account that is setup using SSO will get locked if too many username password attempts have been tried. If one would then try to login using SSO (like Google) the user is still locked out of their account.

Expected behavior

When locked out of your account based on username and password, login using SSO should still work.