Updated notification on the user's blocked account
When user has blocked his account (too many incorrect password tries), during the logging in the notification just states: "you cannot log in". It would be easier to detect problem, if there is a notification: "your account is blocked, please contact your local admin".
-
wanted to follow up here with an update. Thanks to Chris for flagging earlier that a ticket had already been created for this — we wanted to dig back in and see where things stood as Chris is not in the company anymore.
We took a closer look together with our front-end engineering team, and it turns out this is currently limited by Okta itself: the Sign-In Widget doesn't support setting up separate, more specific inline error messages for blocked or suspended users versus general authentication/access failures. Okta intentionally shows a generic, hardcoded security message in these blocked/suspended cases, mainly to avoid leaking information that could help a bad actor figure out an account exists and is simply blocked.
So unfortunately, we don't have a way to customize this messaging within the standard widget as it stands today.
-
Thank you for bringing this to our attention. I agree that providing a more specific notification for blocked accounts would improve the login experience. I’ve created a ticket for this request and added it to our backlog.