There is the long description of the property AuthFailureLoggingThreshold. "longDescription": "This property shall contain the threshold for when an authorization failure is logged. Logging shall occur after every `n` occurrences of an authorization failure, where `n` represents the value of this property. If the value is `0`, logging of authorization failures shall be disabled."
Is the AuthFailureLoggingThreshold be used for all accounts or each account need to check seperatly?
The threshold applies to each account. The underlying feature (disabling an account due to excessive invalid login attempts) tracks attempts per account, so the logging function follows that process. You would not want to take actions based on attempts across accounts, as that would provide a method to create a denial-of-service attack.
We've added a few words to the description for that property to make this clear in schema - so thanks for pointing this out.