title: Keycloak: Temporary and permanent lockout of user
body: <p>I need to "implement" the following flow in keycloak as idp:</p>
  
  <ol>
  <li>The user has 3 failure logins</li>
  <li>The user should be temporary locked for 5 minutes</li>
  <li>The user has 3 failure logins again</li>
  <li>The user should be temporary locked for 5 minutes again</li>
  <li>The user has 3 failure logins again</li>
  <li>The user should be locked permanent</li>
  <li>The user should receive an e-mail that he's locked permanent.</li>
  </ol>
  
  <p>I saw the Brute Force detection under Authentication in Keycloak. But my scenario adress both the temporary and permanent lockout.</p>
  
  <p>Do you have any idea about a possible approach to address this requirement?</p>