Hi,

I'm trying to validate that my client's handling of a captcha challenge from the authentication API is correct, however I am failing to produce a captcha situation, thus failing to test the code to handle it! So, my question is: When is a captcha challenge actually issued? I've tried logging in with an incorrect password up to 20 times in quick succession, but still I only get the normal "BadAuthentication" error, and an attempt to login with the correct password following this will always succeed without any challenge.

Any tips? BR