A customer asked me for intruder detection because he wants more security. This is working for synchronized accounts because of LDAP in the background.

But how to deal with local and email address accounts? Well, there is a CAPTCHA mechanism in the background but this customer wants to use his own settings.