AEM Console Login Security Standards

Hello there - we're looking for some guidance/directions on how to improve the AEM Console login standards specifically in the area of limiting the number of login attempts and the ability to lock an account if the number of attempts have been exceeded. We have implementation that uses SSO using LDAP and we are able to enforce these standards but is there a way to do this with the out of the box login with AEM? Any information would be great!