MFA_Security / Correlate repeated prompts, denied/approved challenges, source IPs, device fingerprints, login success, and session creation. · size 20 · threshold 4 · max attempts 3