ASP.Net Core SignInManager lockoutOnFailure
<p>ASP.Net Core has SignInManager which handles user authentication. One of the methods is <code>PasswordSignInAsync(string username, string password, bool isPersistent, bool lockoutOnFailure)</code>. Setting lockoutOnFailure to true should temporarily lock out the user after a certain number of failed login attempts.</p>

<p>Looking at the AspNetUsers table in the database I see the following:</p>

<ul>
<li>AccessFailedCount increase by 1 for each failed access, when it hits 5 it rolls over to 0.</li>
<li>Upon rolling over to 0 LockoutTimeEnd is set to 5 minutes into the future.</li>
<li>LockoutEnabled however remains 0 even after rollover, and user can continue attempting to log in.</li>
</ul>

<p>It looks like the intended functionality is to allow 5 login attempts, then lock out the account for 5 minutes.</p>

<p>So my questions are are:</p>

<ol>
<li>How do I set number of allowed failed logins?</li>
<li>How do I set the lockout period?</li>
<li>Why doesn't the lockout trigger?</li>
</ol>