How to invoke a flow/trigger if a user fails login attempt?

Question

What Needs to Happen: When a user logs into the org, we perceive the attempt as either Successful (correct password), Failed (incorrect password), or Other. If the user fails the login attempt, a User object field 'Failed Attempt Counter' is increased by 1. Once the counter reaches 3, an email is sent.

The Problem: The process above has been created using a Flow/Process Builder, however, since Login Flows are only invoked post-authentication, the Flow only every updates when their is a Successful login attempt. I can call the Flow I've created if I can find a way to invoke it every time a User attempts to log in, but I can't call LoginHistory from a trigger, and the Flow won't start until their is a Successful login attempt.

Question: How do I invoke Apex/Flow/Process Builder Flow whenever someone logs in? Is there a better solution?

The Flow in case you are interested (though not necessary to answer my question):

Answer 1

You cannot run a process builder/trigger/workflow without logging in.

The best you do is with invalid password then lockout the user. Set the lockout effective period to forever, then show a locked user a page asking them to email the admin/security team. By this way, the security team will always know whats going on with users.

---

Another Approach will be to schedule a Scheduler every 30mins to 1 hour.

The scheduler will query LoginHistory table for LoginTime=Today

SELECT ApiType,ApiVersion,Application,AuthenticationServiceId,Browser,CipherSuite,ClientVersion,CountryIso,Id,LoginGeoId,LoginTime,LoginType,LoginUrl,NetworkId,Platform,SourceIp,Status,TlsProtocol,UserId FROM LoginHistory where LoginTime=Today

Then iterate over the records to find a record where status='Invalid Password' (You cannot use status field as filter on query for LoginHistory)

Once found gather it, make a set and then send an aggegate email to the System's team