Hi, I've not found such issue in the forum but if it exists, please send me a link and I will close this topic.

I fount that User AccessFailedCount field is not reset after login. I can see that it stays the same in DB.

Steps to reproduce: 1. Try to login with a user using wrong password 2 times of 3 in any browser. 2. Login with the same user successfully using right password. 3. Logout. 4. Try to login with the same user using wrong password 2 times. 5. Try to login using right password and you can't do it cause the failed count field wasn't reset previously.

I found a fix for it. The AccessFailedCount field was updated in DB but not in the BackOfficeIdentityUser reference. So I created custom back office manager and overridden CheckPasswordAsync.

 public override async Task<bool> CheckPasswordAsync(BackOfficeIdentityUser user, string password)
    {
        bool isPasswordValid = await base.CheckPasswordAsync(user, password);
        if (isPasswordValid)
        {
            user.AccessFailedCount = 0;
        }

        return isPasswordValid;
    }

Now it works properly.

Could you please answer if it's my bad or it's an issue?

Thank you very much.