User Lockouts
Description
The lockout function is an automated process that is initiated based on settings specific to each subscription.
The default setting on every subscription will lock out users for 1 hour after 5 failed attempts at accessing Rally though subscription administrators can customize these values at any time
To modify these options, Subscription Administrators can go to Setup > Subscription > Actions > Edit Subscription. This will bring up an editor allowing modification of the two fields pertaining to this functionality:
- Maximum Failed Login Attempts: This is the number of tries users may attempt prior to having their account locked. Valid values are between 3 and 99.
- Amount of Time Users will be Locked Out: This is the length of time a user would need to wait before reattempting to access Rally if their account is not manually unlocked.Valid values are 15 minutes, 30 minutes, 1 hour, 4 hours, 24 hours and Forever.
Troubleshooting Locked Users
We typically find the common cause for users being continually locked out results from an integration, script, connector (such as Subversion or Eclipse) or other automated process running in the background which hasn't had the credentials updated. These failed logins do count towards the invalid attempt limit and will eventually lock the user after reaching the set number of tries.
Please investigate any web services processes that might be using those credentials to see if modifications are needed.
Restoring Access to Locked Users
In addition to simply waiting for the lockout period to expire, Workspace or Subscription Administrators can manually unlock user accounts by going to Setup > Users and clicking the Edit option for that individual.
When a user is locked there will be a checkbox with the label “This account is locked. Click to unlock:”. Simply uncheck the box, select Save & Close and the user will be able to try accessing Rally again.
It may also be helpful to select the box for “Did this user forget their password?” at the same time so the automatic password reset email will be generated and the user can update their credentials