While logging on to SCM, if your credentials are correct and accepted, you are authorized to use the application. However, if you have entered invalid credentials, an error message appears.
If the number of attempts exceeds the maximum allowed failed attempts (three attempts by default) during a specific period of time (30 seconds, by default), that user will be blocked from attempting to login for the indicated Reset time interval (35 seconds, by default). However, after entering incorrect credentials for the first time, if you wait for 35 seconds before entering your credentials again, the system resets the invalid attempts counter to zero.
To configure the incorrect password attempts and lockout duration, complete the following steps.