Account lockout
To prevent repeated MFA attempts as part of an attack, the account lockout settings let you specify how many failed attempts to allow before the account becomes locked out for a period of time. The account lockout settings are applied only when a PIN code is entered for the MFA prompt.
The following settings are available:
Number of MFA denials that trigger account lockout
Minutes until account lockout counter is reset
Minutes until account is automatically unblocked
To configure account lockout settings, complete these steps:
Sign in to the Azure portal as an administrator.
Go to Azure Active Directory > Security > MFA > Account lockout.
Enter the values for your environment, and then select Save. pfmlogin
