3796080 - Email OTP Mismatch and Persistent Lockout in IAS

The following symptoms are observed in IAS for affected users:

• Login attempts trigger email-based 2-step verification, and an OTP is successfully delivered to the user's registered email address.
• The received OTP is reported as not matching upon entry, even when entered correctly and within the valid time window.
• After 5 or more failed OTP attempts, the account is locked and the following error message is displayed:

"Sorry, email two-factor authentication is temporarily locked because of too many failed logon attempts. It will be automatically unlocked in 60 minutes. "

• The account lockout persists beyond the expected 60-minute automatic unlock window, leaving affected users unable to regain access to their accounts.

SAP Cloud Identity Services

ias, identity authentication, email otp, otp mismatch, code does not match, two-factor authentication, mfa, lockout, 60-minute lock, otp lock not clearing, otp authentication failure, MFA , KBA , BC-IAM-IDS , Identity Authentication Service , Problem