Error codes
Every error code the API and the OAuth endpoints return, with its status and what to do.
On this page
The codes below are generated from the contract's error vocabulary, the OAuth error list and the bearer-token errors. OAuth codes arrive in the error field of the JSON response of the token and pushed authorization endpoints. Log users in shows how the SDK reports them.
already_deactivated#
APIThis account is already deactivated.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "already_deactivated", "message": "This account is already deactivated.", "requestId": "<request id>" }}already_verified#
APIThis is already verified.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "already_verified", "message": "This is already verified.", "requestId": "<request id>" }}client_enable_refused#
APIThat application cannot be enabled right now.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "client_enable_refused", "message": "That application cannot be enabled right now.", "requestId": "<request id>" }}client_limit_reached#
APIYou have reached the limit for applications.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "client_limit_reached", "message": "You have reached the limit for applications.", "requestId": "<request id>" }}client_suspend_refused#
APIThat application cannot be suspended right now.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "client_suspend_refused", "message": "That application cannot be suspended right now.", "requestId": "<request id>" }}conflict#
APIThat changed while you were working on it. Refresh and try again.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "conflict", "message": "That changed while you were working on it. Refresh and try again.", "requestId": "<request id>" }}cross_origin#
APIHTTP status 403That request did not come from this site, so it was refused.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "cross_origin", "message": "That request did not come from this site, so it was refused.", "requestId": "<request id>" }}deactivation_refused#
APIThis account cannot be deactivated right now.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "deactivation_refused", "message": "This account cannot be deactivated right now.", "requestId": "<request id>" }}device_too_new#
APIThis browser is new to your account. You can make this change from it 24 hours after you confirm it by signing in with a link or code emailed to you, or from a browser you already use.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "device_too_new", "message": "This browser is new to your account. You can make this change from it 24 hours after you confirm it by signing in with a link or code emailed to you, or from a browser you already use.", "requestId": "<request id>" }}email_unavailable#
APIHTTP status 503We could not send email right now. Try again in a few minutes.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "email_unavailable", "message": "We could not send email right now. Try again in a few minutes.", "requestId": "<request id>" }}export_available#
APIAn export is already available. Download it or wait until it expires.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "export_available", "message": "An export is already available. Download it or wait until it expires.", "requestId": "<request id>" }}export_in_progress#
APIYour export is being prepared. Check back in a few minutes.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "export_in_progress", "message": "Your export is being prepared. Check back in a few minutes.", "requestId": "<request id>" }}export_key_rotated#
APIThis export can no longer be verified and has to be requested again.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "export_key_rotated", "message": "This export can no longer be verified and has to be requested again.", "requestId": "<request id>" }}first_factor_not_applicable#
APIThat sign-in method does not apply to this account.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "first_factor_not_applicable", "message": "That sign-in method does not apply to this account.", "requestId": "<request id>" }}forbidden#
APIYou do not have access to that.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "forbidden", "message": "You do not have access to that.", "requestId": "<request id>" }}insufficient_assurance#
APIConfirm it is you with a stronger sign-in method to continue.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "insufficient_assurance", "message": "Confirm it is you with a stronger sign-in method to continue.", "requestId": "<request id>" }}invalid_code#
APIThat code is not right or has expired.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "invalid_code", "message": "That code is not right or has expired.", "requestId": "<request id>" }}invalid_credential#
APIThat passkey could not be verified. Try again or use another method.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "invalid_credential", "message": "That passkey could not be verified. Try again or use another method.", "requestId": "<request id>" }}invalid_credentials#
APIThose details did not work. Check them and try again.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "invalid_credentials", "message": "Those details did not work. Check them and try again.", "requestId": "<request id>" }}invalid_current_password#
APIThe current password is not right.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "invalid_current_password", "message": "The current password is not right.", "requestId": "<request id>" }}invalid_password#
APIThat password does not meet the requirements.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "invalid_password", "message": "That password does not meet the requirements.", "requestId": "<request id>" }}invalid_request#
APISomething in that request was not valid. Check it and try again.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "invalid_request", "message": "Something in that request was not valid. Check it and try again.", "requestId": "<request id>" }}invitation_invalid#
APIThis invitation is not valid or has expired.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "invitation_invalid", "message": "This invitation is not valid or has expired.", "requestId": "<request id>" }}last_platform_admin#
APIYou are the last platform administrator, so this is not allowed.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "last_platform_admin", "message": "You are the last platform administrator, so this is not allowed.", "requestId": "<request id>" }}last_sign_in_method#
APIThat is your only way to sign in, so it cannot be removed. Add another first.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "last_sign_in_method", "message": "That is your only way to sign in, so it cannot be removed. Add another first.", "requestId": "<request id>" }}leave_refused#
APIYou cannot leave this workspace.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "leave_refused", "message": "You cannot leave this workspace.", "requestId": "<request id>" }}managed_account#
APIHTTP status 403Your organization manages this account, so this is not available here. Ask your organization’s administrator.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "managed_account", "message": "Your organization manages this account, so this is not available here. Ask your organization’s administrator.", "requestId": "<request id>" }}merge_conflict#
APIThese two accounts cannot be merged because they conflict.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "merge_conflict", "message": "These two accounts cannot be merged because they conflict.", "requestId": "<request id>" }}merge_refused#
APIThat account could not be merged.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "merge_refused", "message": "That account could not be merged.", "requestId": "<request id>" }}no_passkey#
APINo passkey was found for this account.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "no_passkey", "message": "No passkey was found for this account.", "requestId": "<request id>" }}no_pending_enrollment#
APIThere is no setup in progress. Start again.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "no_pending_enrollment", "message": "There is no setup in progress. Start again.", "requestId": "<request id>" }}no_personal_workspace#
APIThis account has no personal workspace.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "no_personal_workspace", "message": "This account has no personal workspace.", "requestId": "<request id>" }}not_found#
APIWe could not find that.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "not_found", "message": "We could not find that.", "requestId": "<request id>" }}password_already_set#
APIThis account already has a password.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "password_already_set", "message": "This account already has a password.", "requestId": "<request id>" }}password_required#
APIEnter your password to continue.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "password_required", "message": "Enter your password to continue.", "requestId": "<request id>" }}payload_too_large#
APIThat was too large to send.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "payload_too_large", "message": "That was too large to send.", "requestId": "<request id>" }}pow_required#
APIHTTP status 428One moment, we are checking this request.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "pow_required", "message": "One moment, we are checking this request.", "requestId": "<request id>" }}provider_unreachable#
APIWe could not reach that provider. Try again in a moment.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "provider_unreachable", "message": "We could not reach that provider. Try again in a moment.", "requestId": "<request id>" }}rate_limited#
APIHTTP status 429Too many attempts. Wait a little and try again.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "rate_limited", "message": "Too many attempts. Wait a little and try again.", "requestId": "<request id>" }}registration_failed#
APIThe passkey could not be saved. Try again.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "registration_failed", "message": "The passkey could not be saved. Try again.", "requestId": "<request id>" }}registration_limited#
APIHTTP status 503Sign-up is temporarily limited. Please try again later.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "registration_limited", "message": "Sign-up is temporarily limited. Please try again later.", "requestId": "<request id>" }}scope_denied#
APIThat access is not allowed for this account.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "scope_denied", "message": "That access is not allowed for this account.", "requestId": "<request id>" }}second_step_unavailable#
APIThat extra sign-in step is not available for your account right now.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "second_step_unavailable", "message": "That extra sign-in step is not available for your account right now.", "requestId": "<request id>" }}server_error#
APISomething went wrong on our side. Try again in a moment.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "server_error", "message": "Something went wrong on our side. Try again in a moment.", "requestId": "<request id>" }}sign_in_required#
APISign in to continue.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "sign_in_required", "message": "Sign in to continue.", "requestId": "<request id>" }}state_conflict#
APIHTTP status 409This page was out of date. It has been refreshed to where you are.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "state_conflict", "message": "This page was out of date. It has been refreshed to where you are.", "requestId": "<request id>" }}step_up_required#
APIHTTP status 401Confirm it is you to continue.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "step_up_required", "message": "Confirm it is you to continue.", "requestId": "<request id>" }}token_limit_reached#
APIYou have reached the limit for access tokens. Revoke one to create another.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "token_limit_reached", "message": "You have reached the limit for access tokens. Revoke one to create another.", "requestId": "<request id>" }}tokens_disabled#
APIAccess tokens are not available for this account.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "tokens_disabled", "message": "Access tokens are not available for this account.", "requestId": "<request id>" }}totp_already_enabled#
APIAn authenticator app is already set up.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "totp_already_enabled", "message": "An authenticator app is already set up.", "requestId": "<request id>" }}totp_enrolment_disabled#
APISetting up an authenticator app is not available right now.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "totp_enrolment_disabled", "message": "Setting up an authenticator app is not available right now.", "requestId": "<request id>" }}txn_ended#
APIHTTP status 410This sign-in has ended. Start again from the application you came from.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "txn_ended", "message": "This sign-in has ended. Start again from the application you came from.", "requestId": "<request id>" }}unauthenticated#
APISign in to continue.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "unauthenticated", "message": "Sign in to continue.", "requestId": "<request id>" }}unsupported_media_type#
APIThat request was not in a format we accept.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "unsupported_media_type", "message": "That request was not in a format we accept.", "requestId": "<request id>" }}username_unavailable#
APIThat username is taken.
What to do Fix the cause named in the message, then retry once. If it keeps happening, quote the reference you were shown.
{ "error": { "code": "username_unavailable", "message": "That username is taken.", "requestId": "<request id>" }}access_denied#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "access_denied"}consent_required#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "consent_required"}insufficient_user_authentication#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "insufficient_user_authentication"}interaction_required#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "interaction_required"}invalid_authorization_details#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_authorization_details"}invalid_client#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_client"}invalid_dpop_proof#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_dpop_proof"}invalid_grant#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_grant"}invalid_request#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_request"}invalid_request_uri#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_request_uri"}invalid_scope#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_scope"}invalid_target#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "invalid_target"}login_required#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "login_required"}server_error#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "server_error"}unauthorized_client#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "unauthorized_client"}unsupported_grant_type#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "unsupported_grant_type"}unsupported_response_type#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "unsupported_response_type"}use_dpop_nonce#
OAuth
What to do Start the flow again from the beginning. A request that failed will not succeed if it is sent again unchanged.
{ "error": "use_dpop_nonce"}insufficient_scope#
BearerHTTP status 403
What to do Get a new access token with the scopes the call needs, then repeat the call.
WWW-Authenticate: Bearer error="insufficient_scope"invalid_token#
BearerHTTP status 401
What to do Get a new access token with the scopes the call needs, then repeat the call.
WWW-Authenticate: Bearer error="invalid_token"