Cannot sign in
Why a sign-in does not complete, what each message on the sign-in pages means, and how to get back in.
On this page
Symptom#
You enter your details on the sign-in page and you do not end up signed in. You may see Those details did not work. Check them and try again., This sign-in has ended, Sign-in was refused, or the page simply asks you for another step.
The sign-in pages are deliberately vague about one thing: they never say whether an account exists for what you typed. The same message appears for an unknown address and for a wrong password, and a sign-in link or code is sent "if this address can sign in". Do not read a missing email as proof that there is no account.
Likely causes#
| What you see | Likely cause |
|---|---|
| Those details did not work. Check them and try again. | The email, username or password is wrong. A password saved by a browser may be an old one. |
| Too many attempts. Wait a little and try again. or Too many attempts. Try again in 12 minutes. | Too many attempts in a short time; the second form says how long to wait. See 429 Too Many Requests. |
| This sign-in has ended, with a reason | The sign-in sat open too long (It was open for too long.), was cancelled, already finished, or was stopped because you said it was not you. A sign-in in progress is short lived and is stopped after repeated failures. |
| Sign-in was refused, This sign-in cannot continue., with Recover your account | The sign-in was stopped. Use the recovery link on that page if you cannot get in another way. The page can give a more exact reason, listed in Sign-in errors: an unusual-looking sign-in, a second factor the account does not have, or This account signs in with a passkey. Start a new sign-in and use your passkey. (the button then starts a new sign-in). |
| A page titled Choose a password | The account has no password and every account needs one. Type it twice and select Save password and continue. See Sign in with a password. |
| On the second step, Continue with my password only (limited session), Email me a code instead and I lost my passkey | The sign-in looked unusual, so your passkey or authenticator app is asked for, but a correct password still signs you in: the first button does that in a limited session. The emailed code signs you in one level lower; the link starts recovery. See The second step. |
| That passkey could not be verified. Try again or use another method. | The passkey was not accepted. See Passkey not offered. |
| That code is not right or has expired. | The code from an authenticator app or an email is wrong, late or already used. See Link or code expired. |
| That sign-in method does not apply to this account. | You chose a method the account does not have, for example a passkey on an account with none. |
| That sign-in method is not strong enough for this application. | Shown after an external provider sign-in. The application asked for a higher assurance than that method gives. Sign in with a passkey, or with a password and an authenticator code. See Assurance and method values. |
| That account cannot sign in right now. | Shown after an external provider sign-in. The account is not active. |
| The provider did not share a verified email address. Verify your email with the provider (for GitHub, set a public or primary verified email) and try again. | Shown after an external provider sign-in. The provider did not send an address it has verified. |
| Creating an account with that sign-in needs a verified email address from the provider, and registration must be open. | Shown when an external provider sign-in has no account to land on. |
| A page titled Confirm this sign-in | The browser or place was not recognised and the organization wants a confirmation. Open the emailed link in the same browser. |
| After an external provider: Sign in with your existing method first, then link that provider from your account. | The external account is not linked to a TDACorp account yet. Sign in the usual way, then link it. |
| A page titled Sign in with your organization | Your email address belongs to an organization that requires single sign-on. Select Continue with the organization name, or Use another method; the organization's requirement is still enforced when you enter it. Only where the platform has turned on tenant_connections (default OFF). |
| No Create an account link, or Registration is closed | Sign-up is closed on this deployment. If you were invited, open the link in the invitation email. |
| Sign-up is temporarily limited | Too many accounts were created today. Try again later. |
An organization can also decide which sign-in methods its members may use and how strong a sign-in must be. An organization inside another one can only tighten what the organization above it sets, so the stricter setting wins. If your usual method is not offered, that setting is the likely reason, and the sign-in page only shows the methods available to you.
What to check#
- Read the title and the exact sentence on the page, and match it to the table.
- Check the address you typed. If the account has a username and the page accepts one, the field is labelled Email or username.
- If you used an emailed link, make sure you open it in the same browser you started in, and select Continue on the page that opens.
- If the page said the sign-in ended, start again from the application you came from, or select Start a new sign-in.
- Check your device clock. A clock that is wrong by several minutes breaks codes from an authenticator app. See Clock skew.
- Note the Request ID or the Reference code if the page shows one, and follow Why does this happen? where it is offered.
Fix#
- Wrong password. Select Forgot password? on the password step and follow the message. Recovery cannot finish without a new password. For an account with a passkey or an authenticator app, a wait of at least 24 hours applies before a reset takes effect, and the owner is told by email so a recovery they did not start can be cancelled.
- Lost authenticator app. Where your organization allows it, choose Use a recovery code on the second step. Each recovery code works once.
- No passkey on this device. Choose another method on the same page. If the passkey is lost for good, see Email me a code instead above.
- Still stuck. Quote the Request ID or Reference when you contact the owner of the application or TDACorp.