Password lockout approach

[Cantor, Scott]

> > I'm looking to see if there are any suggestions as to where to
> > plug this in.  I'd also like to do this in a relatively generic manner
> > so others could make use of it.
> 
> I really don't know enough about the use case. There's an issue open on it,
> and I haven't spent any time considering what would be involved.

https://issues.shibboleth.net/jira/browse/IDP-156

I'm happy to ship something if it's built, so you shouldn't feel compelled to confine this to editable files. If you want to modify the system or code and provide patches, that's fine. My only real constraint is that it has to use the storage API to be considered for inclusion.

I would probably suggest just making some patches against the Validate action beans that are in Java to equip them with this functionality. That's probably less hassle than screwing around with fancy flow modifications.

I think there's a base class in the API you could extend maybe...

-- Scott