[Progress Communities] [Progress OpenEdge ABL] Forum Post: RE: Using the HybridRealm and the GetAttributes() Method to handle Expired or Locked accoun

[Michael Jacobs]

You do not want to provide that level of detail to a client - always assuming any client is being used to mine information useful in an attempt to gain access to a user-account. That is why you generally see only 'login failed' and the options for 'forgotten user-id' and 'forgotten password'. Frustrates me often enough when I see those screens, but it is the prudent approach. As Peter said, leaving behind a log for the help desk to reference is a good idea when assisting the client regain access to their account. It may assist in determining that the account was locked out, but not by the client themselves.

Continue reading...