Login throttling

[Richard Frovarp]

Is there anything built in to IdP v3 that can do login throttling? That 
seems like the one thing that is missing from the 
PasswordAuthnConfiguration. I want to do fail2ban style throttling where 
I block out the remote system instead of the user. This would prevent a 
remote system from doing a DoS against an account, and prevent searching 
for the accounts with a password of "Password1".

I have mod_security available to use. I could use that if I knew of all 
of the URLs where a login could be posted.

Thanks,

Richard