Blocked User Able to Login via Biometric
Last Updated:
Overview
This article explains why a user who has been locked user due to multiple incorrect login attempts using a username and password can successfully log in with biometrics. The user shows as Blocked in Auth0.
Applies To
- Blocked or Locked out User
- Biometrics
Solution
This behavior is expected.
Brute force lock only applies to username and password authentication to prevent credential stuffing). Biometric authentication is not blocked in this scenario.
