For 2) Look at "realm settings"->"security defense"->"brute force detection" For 1&3) Look at "Authentication"->"policies"->"Password policy" but to achive what you want you have to implement your own policy