From 7d0fabf9ebb28f934515d0e139597d4bd2c54c4b Mon Sep 17 00:00:00 2001 From: Lukasz Kozubal <58331927+lucas-ko@users.noreply.github.com> Date: Sun, 24 Nov 2024 14:31:24 +0100 Subject: [PATCH] Update EntraID-SmartLockout.md --- EntraID-SmartLockout.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/EntraID-SmartLockout.md b/EntraID-SmartLockout.md index fa31c91..19ae7c7 100644 --- a/EntraID-SmartLockout.md +++ b/EntraID-SmartLockout.md @@ -1,7 +1,9 @@ -## Entra ID - smart lockout - protect your users from malicious account lockouts! +## Entra ID - smart lockout - protects your users from malicious account lockouts! I recently had several conversations related to smart lockout feature in Entra ID. Based on those, it occurred to me that inner workings of this feature are not as widely know as I assumed.
-**TL;DR - Smart lockout is a capability of Entra ID that makes a given user account appear locked out for certain entities, while allowing legitimate users to successfully authenticate.** +## **TL;DR
** +Smart lockout is a capability of Entra ID that makes a given user account appear locked out for certain entities, while allowing legitimate users to successfully authenticate.
+By slowing down an attacker, it raises the cost of successful brute force attack on primary authentication factor (it's unfortunately still a password in majority of the cases). ## How does Entra ID realize this?