The Login Failure policy can be part of the same policy as the Form Fill policy, if both share the same URL. In this case, the Form Login Failure policy must be the first action in the policy, and the Form Fill policy must be the second action in the policy. This causes a login failure to execute the policy that clears the stored data and the Form Fill policy to prompt the user for new data.
If the user is redirected to a different page when login fails, it is best to create a separate policy for that page, create a protected resource that includes just that page, and assign your Form Login Failure policy to that resource.
To create a Login Failure policy:
Click Policies > Policies.
Select the policy container, then click New.
Specify a name for the policy, select Access Gateway: Form Fill as its Type, then click OK.
In the Actions section, click New > Form Login Failure.
In the Form Selection section, identify the form. This section uses the same criteria for identifying a form as the Form Fill policy. For more information, see Step 7 and Creating a Form Matching Rule.
In the Login Failure Processing section, define the actions you want executed when a user fails to log in. Specify the following details:
Redirect to URL: When a user’s login attempt fails, use this option with its text box to specify the URL you want the user redirected to. This is optional and allows you to customize what happens on login failures.
Clear Shared Secret Data Values From Policy: Select this field to delete the user’s stored data for a Form Fill policy. If the user has the ability (and perhaps the requirement) to periodically change his or her password or any other information about the form, you need to select this field. Otherwise, the wrong data can be stored for the user, and Access Gateway has no way of updating the information.
From the list of Form Fill policies, select the policy whose stored values must be cleared with this Login Failure policy.
Click OK > Apply Changes.
Continue with Assigning a Form Fill Policy to a Protected Resource.