Question

Using the Salesforce Web Services API is it possible to check (or query) if a User is Locked Out (if they have attempted to log in unsuccessfully too many times and are therefore blocked from logging in)?

Answer 1

Although there is no specific field on the User object to indicate that they are locked out, you can query the LoginHistory object.

select Id, UserId, LoginTime, Status from LoginHistory where
    UserId = 'xxxxxxxxx' order by LoginTime desc limit 20

Then loop through the results, checking the value of the Status field. If the user has been locked out, the most recent login attempts will have a value of “Password Lockout” in this field.

Other possible values of this Status field include:

• Success
• User is Inactive
• Invalid Password
• Failed: API security token required
• Failed: Computer activation pending
• Failed: Computer activation required
• Failed: Invalid Timestamp
• Failed: Mobile License Required