Creating this on behalf of a customer: There is no lock out feature if a user account after multiple bad attempts.