This recipe shows how to configure Extranet Smart Lock-out on an Active Directory Federation Services (AD FS) farm running Windows Server 2016, or a newer version of Windows Server.
Configuring Extranet Smart Lock-out
Getting ready
When using AD FS on Windows Server, make sure at least the June 2018 Cumulative update for Windows Server 2016 (KB4284880 (https://support.microsoft.com/en-us/help/4284880/windows-10-update-kb4284880), OS build 14393.2312), is installed on all AD FS servers in the AD FS farm.
Sign in with an account that is an AD FS Administrator. By default, members of the Domain Admins group have the required permissions. Sign into the primary AD FS server when the AD FS farm is using the Windows Internal Database...