Has anyone implemented provisionally locking a PeopleSoft account for a defined period?

I need to programmatically lock PeopleSoft accounts that reach a failed logon threshold.  These accounts need to be locked for a defined period (minutes) that is based on corporate standards.  Current standards are to lock a user’s account for 20 mins. after x number of failed login attempts.  The Identity Access Management team is requesting we implement something similar, to mitigate brute force attempts to log in to PeopleSoft.  Initial thoughts are to turn on Password Controls, modify the PeopleCode to monitor the “Failed Logons” count.  If it exceeds the Failed Logons count maintained on the Password controls page, then