Login problem

[Steven Lee]

Currently using Basic HTTP Authentication to log in. When user consecutively fails to login successfully, user won't be able to login successfully despite correct credentials.

After investigation, I found out that CAPTCHA is triggered after several failed login attempts.

Questions:

1) Without changing the type of authentication (still Basic HTTP Auth), are there ways to prevent this scenario from happening?

2) If we are going to switch to OAuth, will CAPTCHA still be triggered?

Additional Note: Our JIRA is on the cloud

[Maarten Cautreels · Accepted solution]

Hi Steven,

1. You can disable the captcha from being required after using a wrong password. You can do so in the General Settings for JIRA and leave the "Maximum Authentication Attempts Allowed" empty. For more info, see here.
2. I'm afraid the problem will be the same when using OAuth. At least it's mentioned here.

Best,

Maarten