Repository navigation
Add Email Notification for Brute-Force Detection #37768
Replies: 2 comments 3 replies
|
At first glance this seems like a good idea, especially to let users know that their account is locked, so they can know why they cannot log in, but I can see at least two possible downsides:
|
|
Also, do note that there is no action that a user can take in case of a brute force attack. The detection itself confirms that the user (likely) did not have their credentials compromised, so there's nothing they can do to make them better (there's no reason to change a password that attackers were not able to guess). Administrators may also have limited recourse in the matter, other than blocking offending IP addresses and sending abuse emails, but automated systems would likely be more efficient in this aspect as well. |
|
We found out this is already developed, not mentioned in documentation. We will create PR with updated documentation. |
|
Any news on this? |
|
https://www.keycloak.org/docs/latest/server_admin/index.html#event-listener Yes, we have updated documentation here. |
Uh oh!
There was an error while loading. Please reload this page.
Starting this thread to discuss a feature that would send email notifications when Keycloak detects a brute-force attack on a user account. This could help administrators and users take quick action to prevent potential security breaches.
Currently, Keycloak provides brute-force detection to block repeated failed login attempts, but there’s no built-in feature to notify administrators or users via email when such an event occurs. Adding an email notification option for brute-force attacks could enhance security awareness and allow for quicker response actions.
This feature would help admins react faster and enable users to take action if their accounts are targeted.
I would appreciate your thoughts and feedback on this proposal.
All reactions