Forgotten password screen has limit to enter invalid user ID for three attempts

Products

• CA Identity Manager

Issue/Introduction

I have entered the invalid user ID at "Forgotten Password" screen for three times and seen the error message below.

Error:    Could not find a user matching the information provided and retry limit reached.

Is there any limit to enter the invalid user ID at "Forgotten Password" screen?

Is the number of attempts configurable?

Environment

CA Identity Manager

Resolution

If you fail to enter the User ID to identify yourself after 3 attempts then you get the above message.

You can just click OK and try it again.

This is the design. There is no way to unlimit these identification attempts.

People in the security communities would consider unlimited retries on the user identity as a vulnerability.