A workflow activity in the authentication phase of request processing to lockout a user who has failed to authenticate.