diff --git a/security/src/main/java/org/genesys/blocks/security/lockout/AuthenticationFailureBadCredentialsListener.java b/security/src/main/java/org/genesys/blocks/security/lockout/AuthenticationFailureBadCredentialsListener.java
index c6c51735ad0d9ed243a00e21978a83509c19e2b0..cf0b931b29948fe4523e3b1e033d9049eab8af85 100644
--- a/security/src/main/java/org/genesys/blocks/security/lockout/AuthenticationFailureBadCredentialsListener.java
+++ b/security/src/main/java/org/genesys/blocks/security/lockout/AuthenticationFailureBadCredentialsListener.java
@@ -50,7 +50,9 @@ public class AuthenticationFailureBadCredentialsListener implements ApplicationL
 		final Object principal = event.getAuthentication().getPrincipal();
 
 		String userName = null;
-		if (principal instanceof BasicUser<?>) {
+		if (principal instanceof String) {
+			userName = (String) principal;
+		} else if (principal instanceof BasicUser<?>) {
 			userName = ((BasicUser<?>) principal).getUsername();
 		} else if (principal instanceof UserDetails) {
 			userName = ((UserDetails) principal).getUsername();