Users get locked out after failed login attempts.

It sounds like you're experiencing an issue where users are getting locked out of their accounts after a certain number of failed login attempts. This is a common security measure implemented to protect against brute-force attacks.

If you're an administrator or responsible for managing the system, here are some steps you can take to address this:

1. Check Lockout Policy: Review the lockout policy settings in your system. This includes the number of allowed failed login attempts and the duration of the lockout.
2. Adjust Lockout Threshold: Consider whether the current threshold for failed login attempts is appropriate for your environment. It should strike a balance between security and usability.
3. Review Logs: Check the system logs for information about the failed login attempts. This can help you identify any suspicious activity or potential issues.
4. Provide User Guidance: Make sure users are aware of the lockout policy. They should be informed about the number of allowed attempts and the duration of the lockout.
5. Implement Multi-Factor Authentication (MFA): Enabling MFA adds an extra layer of security and can help mitigate the impact of a potential lockout.
6. Train Users: Educate users on best practices for managing their passwords and avoiding common pitfalls that may lead to lockouts.
7. Temporary Unlock: Implement a temporary unlock mechanism that allows users to regain access after a certain period of time, without requiring manual intervention.
8. User Communication: If a user gets locked out, provide them with clear instructions on how to regain access, including any necessary steps they need to take.
9. Monitor for Suspicious Activity: Keep an eye out for any unusual patterns of failed login attempts, as this could indicate a security threat.
10. Consider Account Recovery Procedures: Have a process in place for users to recover their accounts if they forget their passwords or get locked out.

Remember to always prioritize security while ensuring that your users have a positive experience when interacting with your system.