We have protected the WAM UI using Siteminder.
The document used for reference is under
https://support.ca.com/irj/portal/anonymous/kbtech?searchID=TEC569112&docid=569112&bypass=yes&fromscreen=kbresults
But after entering the password incorrectly 3 times - the WAM UI redirects the user to a error screen.
But it does not lock out the user: if the user tries with the correct password the user will be able to login again.
When Administrative Authentication is configured for WAMUI, WAMUI creates a User Directory object along with Domain for protecting the WAMUI for performing authentication and authorization. WAMUI hides this User Directory object from displaying by verifying if description has * Please do not edit this - used by SM Auth domain * text. Hence we will not be able to apply password polices for his User Directory which is causing auditing issues.
This issue is resolved in SiteMinder 12.51 CR05 and in 12.52SP1CR01
Release notes :