A user is blocked when the number of login failures has reached the value configured in Login attempts to lock session Repository property or Login Attempts To Lock User.