...
After successfully logging in, you will be prompted to change the password for the Administrator user who logged in. After doing so as described below, you can proceed with configuring XperienCentral and creating new users and assigning roles. Direct all your backend users to the following URL to log in to XperienCentral:
...
If a user attempts to log in 5 consecutive times without success, they will be locked out of XperienCentral for 10 minutes, after which they can attempt to log in again. This holds true even if their password is changed by an administrator. There is no time limit for the 5 consecutive unsuccessful attempts which means that a user will be locked out even if a year passes between the first and fifth consecutive unsuccessful attempts.
...