We have all the settings for Brute-force protection enabled.
When the user reaches the login attempts as setup in the login threshhold, the email is sent to the user to unblock the login, however the blocked message is not displayed on the login page until the next time the user attempts to login. This is not good from a user experience point of view. The user is sent an email but is not told about it when the email is sent.
What makes it worse is that at the next attempt if the user types enters the correct password the blocked error message is displayed.
Please respond
Thank you