Brute Force Protection

Brute force attack is a technique of gaining unauthorized access by exhausting all possible user/password combinations, typically with the use of an automated tool. In theory, this technique guarantees success if the attacker has a lot of computing power, however, the attacker must make a lot of requests provided that the password requirements are complex enough. SecureAuth protects its endpoints related to Multi-Factor Authentication, Client Authentication, Device Authorization, and Identity Pools from such attacks by enforcing limits on subsequent unsuccessful requests to Identity endpoints. This document shows how to configure those limits.