Hey guys! my friend from my workplace is seems loc...
# ask-a-descoper
s
Hey guys! my friend from my workplace is seems locked out of out descope account and is astandalone user. what could have happened? i would love to send more details on a human's answer
✅ 1
he's email is tal.y@oz.security, he is now a standalone user on a random account, can we put him back in our oz's tenant/account?
d
Hi, I'm Descope's AI assistant. I've put together an initial response below based on your question. Common Lockout Causes • Too many failed password attempts — If the project has a password policy with "Lock account after x attempts" enabled, the user's account gets locked after exceeding that threshold. • Too many failed Security Question attempts — Same lockout logic applies if Security Questions are configured as an auth method. • Too many failed Recovery Code attempts — Recovery code usage can also trigger a lockout after a configured number of failed tries. • Temporary vs. permanent lock — Lockouts can be configured as temporary (user regains access after y minutes) or as a hard lock requiring admin intervention. For the Human Support Agent To investigate and assist, here are the recommended steps: 1. Check Audit Logs — Look for the
UserTemporaryPasswordLock
audit event in the Descope Console. The
data.endTime
field will show when the lock expires. 2. Check Project Password & Auth Method Settings — Review the Authentication Methods settings in the Descope Console to understand what lockout policies are configured (attempts threshold, temporary vs. permanent lock, duration). 3. Check the User's Status — In the Descope Console, verify the user's current status and any relevant details that may indicate the cause of the lockout. For more detailed information, you can refer to the following resources: • Tenant Settings | Descope Documentation • Descope Audit Events | Descope Documentation • Preventing User Enumeration | Descope Documentation • User Management | Descope Documentation
85577 cryingpray 1
s
please forward me to a human
👍 1
c
@Shelly Schwartzer do you have SSO enabled within the org? I just looked and
tal.y@oz.security
is only associated with a free company.
👀 1
If you have SSO enabled, ensure that Tal is entering his email, then clicking the SSO button on the login page. OR if you've not yet invited Tal, ensure you've added Tal to your company from the descopers tab, if not using SSO, once you add Tal there, all he'll need to do is refresh the page then select the drop down at the top left to select projects in the other company.
s
that worked thanks! @Chris Carper
what was the rootcause? so we will know for later on
a
@Shelly Schwartzer All your members that have access to your project have to sign in with the exact same method. That way every user is assoicated with the same company. If you need to invite more people to your project, please add them under the descopers tab first then have them follow the same auth method that is configured under company settings