UME Parameters & Security Policies

A UME user is locked after too many invalid logons. ume.logon.security_policy.auto_unlock_time is set to 0. When does the account unlock on its own?

On a dual-stack AS ABAP+Java, an admin tries to tune the Java lockout threshold ume.logon.security_policy.lock_after_invalid_attempts but finds it forced to 0. Why?

An admin sets ume.notification.lock_performed but locked users still receive no e-mail. What two prerequisites are being missed?

In the UME Administration Console, how do ume.admin.search_maxhits and ume.admin.search_maxhits_warninglevel differ, and what are their defaults?

A UME group is meant to include truly every user, even unauthenticated ones. Which supergroup is that, and how does it differ from Authenticated Users?

In a UME security policy, password_alpha_numeric_required is set to 3. What is the minimum a compliant password must contain?

What does setting ume.logon.security_policy.password_expire_days to 0 do, and what is its default?

Why can an admin change password rules on the Default security policy profile but not on the Technical User profile?

When configuring SAP Logon Ticket SSO on a dual-stack AS ABAP+Java, why must login.ticket_client be changed from its default 000?

A logon ticket is issued by twdf1234.wdf.sap.corp and you need it accepted across all of sap.corp. What value of ume.logon.security.relax_domain.level achieves this?