Authentication and On-Demand MFA API Error Codes

You entered an incorrect username or password.

Your account is locked. Contact your system administrator.

Your account is deactivated. Contact your system administrator.

Your password is expired.

You must change your password.

A system error has occurred in identity domains. Contact your system administrator.

The username that you entered is invalid. Contact your system administrator.

Invalid token. Contact your system administrator.

Token expired. Contact your system administrator.

Identity domains can't authenticate the user account. Contact your system administrator.

There's a problem with the identity domains server. Contact your system administrator.

A federated user can't perform local authentication.

The logout URL {0} is invalid.

Token has no subject.

Token has no issuer.

Token has invalid issue time.

Token has no expiry time.

User not found.

Token has no issue time.

The Subject claim doesn't match the Issuer claim.

The Identity Provider name is either blank or incorrect in the request.

No identity provider is configured.

The credentials that you entered don't match the existing user session.

You aren't authorized to access the app. Contact your system administrator.

Your account isn't activated. To activate your account, click the link in the activation email that was sent to your email address.

Invalid login request. The request wasn't initiated using a supported protocol channel.

Identity domains can't authenticate the user account. Contact your system administrator.

MFA is enabled for the user. The user must provide a second factor of authentication in addition to password authentication.

Tenant has Multifactor Authentication (MFA) enabled. Use MFA for all users of this tenant.

User has Multifactor Authentication (MFA) enabled. Use MFA for this user.

The user is already logged in.

The sign-on policy prevents the user {0} from accessing applications protected by identity domains because: {1}.

You configured an invalid error URL.

Invalid request. The required parameter '{0}' is missing from the request.

The {0} authentication factor is not supported or enabled.

Your request to enroll failed because: {0}. Contact your system administrator.

Enrollment initiation request failed because: {0}.

You are enrolled in the maximum number of 2-Step Verification methods that are allowed.

Authentication initiation request failed because {0}.

Authentication failed.

Couldn't validate security questions because: {0}.

Couldn't update security questions because: {0}.

Your account is locked. Contact your system administrator.

No MFA factors are enabled for this domain.

System error.

You are not authorized to use 2-Step Verification. Contact your system administrator.

The device with ID {1} is not found. Contact your system administrator.

User has not selected any security questions.

You can't skip enrollment. 2-Step Verification is required.

Your 2-Step Verification methods are no longer valid. Contact your system administrator.

The ""{0}"" security question hasn't been enabled for user enrollment. Please contact your system administrator.

You've already provided this answer for another security question. Please specify a different answer for this question.

The answer to the ""{0}"" security question must have at least {1} characters.

You must set up {0} security questions to use the Security Questions feature.

The hint can't be the same as the answer of a security question.

You can select a security question only once.

You have entered the wrong answer.

You have exceeded the maximum number of 2-Step Verification attempts. Reset your password to unlock your account.

Contact your system administrator if you can't reset your password.

You have exceeded the maximum number of 2-Step Verification attempts. Contact your system administrator to unlock your account.

Resetting factors cannot be supported if enrollment type is Required.

Your phone number {0} is not valid.

The phone number {0} is already enrolled for the user.

The device status is not valid.

Payload error. Either the payload in the request is null, or the payload couldn't be parsed.

You are not authorized to perform this action.

You have already enrolled in 2-Step Verification. Register for additional factors using the administrative console.

Session is no longer valid. Close the browser and log in again.

You must set {0} security questions.

Please provide your answer for the ""{0}"" security question.

The ID of the {0} security question isn't valid.

You must answer {0} security questions.

Your answer to the ""{0}"" security question can't exceed {1} characters.

Your hint to the ""{0}"" security question can't exceed {1} characters.

The SMS authentication factor is not enabled.

The PUSH authentication factor is not enabled.

The OTP authentication factor is not enabled.

The Security Questions authentication factor is not enabled.

The Bypass Code authentication factor is not enabled.

Invalid passcode.

Unable to process the request at this time. Use a backup verification method.

Pull notification channel has not been enabled for your tenant.

Push Notification approval is pending.

Enrollment in the One-Time Passcode authentication method is pending verification.

The authentication token has expired.

The request provided is invalid. Please look at the error message for validation error details.

Unexpected error encountered while processing the request.

An authentication factor must be provided while configuring a preferred device.

You must provide the deviceId when configuring {0} as the preferred authentication factor.

The authentication factor passed in the request is not supported. Supported factors are {0}.

The op passed in the request is not supported. Supported operations are {0}.

The requestState provided has expired. Please provide a valid requestState.

You provided an invalid appName. Verify that the App display name is correct.

The operation {0} isn't supported by the {1} endpoint. Use the {2} endpoint.

The requestState provided is either invalid or expired. Please provide a valid requestState.

You provided an invalid request JSON payload.

The application is not active.

An error occurred while logging in using social identity.