Log IP address upon failed credentials

A good security feature to quickly identify attempts to brute force into someones account.

Yes, the account does get locked out after ‘x’ amount of attempts. It would be a nice piece of information to have for IT security purposes.

This is why Azure AD is cool. You’ll get this information and you can add MFA. You get to work with Microsoft’s other security policies and tools too. In additional, all brute force attempts (and not just to Epicor) are logged in one place.