As an administrator I would like to recieve an incident when more then 80% or 90% of the Login attempts on an IDP are failing.
For example in some cases it can occur that the Active Directory agent is online, but not able to logon users succesfully. In this case it would be benificial to have an alert on the failed attempts so an administrator can look into this and perhaps restart the agent.