The runtime logged every invalid AD-LDS login attempt with the message "1 attempt left" because the event logging used a fixed remaining-attempt value instead of the actual attempt counter.
The issue has been addressed and the behavior is now as expected.
To benefit from this fix: