AM 7.3.2

Retry Limit Decision node

Permits the specified number of passes through to the Retry outcome path before continuing evaluation along the Reject outcome path.

Outcomes

  • Retry

  • Reject

Properties

Property Usage

Retry limit

Specify the number of retries to allow.

Default: 3

Save Retry Limit to User

Specify whether the number of failed login attempts persists between successful authentications. Possible values are:

Enabled

The node saves the number of failed login attempts to the user’s profile. New flows using this node start with the stored value and continue to the retry limit.

AM resets the count after the user authenticates successfully with a tree that contains this node.

If AM cannot find the user’s profile, authentication ends with an error.

Disabled

The node saves the number of failed login attempt in the nodeRetryLimitKey shared state property, which is discarded when the authentication session ends.

For security reasons, ForgeRock recommends that you enable this setting.

Default: Enabled.

Example

A RetryLimit authentication tree, showing Retry Limit Decision node use.