ausaccessfed/virtualhome — pull request #163 by bradleybeddoes (2014-05-05 22:58:43+00:00)
Title: Send an email to a user when their account is deactivated by incorrect password attempts

Currently the workflow for account lockout is entirely invisible. It's good security that we don't advertise this on the login screen or to the person making login attempts, but there is no way for the account owner to know that their account has been locked. They're likely to think they've forgotten their password, or that virtualhome is unreliable.

I suggest we email the user when their account is made inactive via this mechanism.