Consider this scenario: A Novacura user, utilizing AD authentication, experiences an AD account lockout. As expected, Novacura restricts their access to prevent unauthorized logins. Despite attempting multiple login attempts, the user remains unable to access Novacura. Eventually, the AD account is unlocked by our help desk personnel. At this point, we anticipate that the user should be able to log in to Novacura again. However, the repeated unsuccessful login attempts have triggered the Novacura lockout mechanism, preventing their access. Since our help desk staff lacks admin privileges in Novacura, they are unable to unlock the Novacura account.

To enhance this situation, it would be beneficial to implement a solution where synced users do not get locked out from Novacura due to AD account issues. This modification would alleviate the complications arising from lockouts and prevent users from being denied access to Novacura even after their AD accounts have been resolved.