Skip to content

Sign-in and account errors

Errors from sign-in, registration, email verification and account security.

Each error below is identified by the code in the error response. The response's docsUrl links to the matching entry on this page.

account_change_unconfirmed

Account change not confirmed · HTTP 409 Conflict

GraphOps may have applied your change to a sign-in method, session or connected account, but could not confirm the result.

What to do: Refresh the Account page and check the result before you make another change.

account_credential_disabled

Sign-in method not available · HTTP 403 Forbidden

The sign-in method you tried to set up is not available for your account.

What to do: Set up a different sign-in method, such as a passkey or a connected account.

account_credential_reconciliation_required

Previous sign-in method change pending · HTTP 409 Conflict

A previous sign-in method change on your account has not been confirmed yet, so GraphOps will not start another one.

What to do: Open the Account page, check the result of your previous change, then try again.

account_disabled

Account access disabled · HTTP 403 Forbidden

Access to GraphOps is disabled for your account.

What to do: Contact support if you think your access should be active.

account_management_failed

Account update failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while updating your account security settings.

What to do: Refresh the Account page and check whether the change was applied. If the error continues, contact support.

account_mfa_change_pending

Two-factor change in progress · HTTP 409 Conflict

Another two-factor authentication change on your account is still being confirmed.

What to do: Check two-factor authentication on the Account page, then make the change again if it is still needed.

account_other_method_required

Another sign-in method required · HTTP 403 Forbidden

This passkey is your only way to sign in, so removing it would lock you out of your account.

What to do: Set up a password or connect a sign-in provider, then remove the passkey.

account_passkey_challenge_invalid

Passkey response does not match · HTTP 400 Bad Request

The passkey response does not belong to the passkey setup you started, or it came from another site.

What to do: Start a new passkey setup from the Account page and complete it in the same browser.

account_passkey_invalid

Invalid passkey · HTTP 400 Bad Request

The passkey name is missing or the passkey response is invalid or was rejected.

What to do: Enter a passkey name and start a new passkey setup.

account_passkeys_incomplete

Passkey list unavailable · HTTP 503 Service Unavailable

GraphOps could not load the complete list of passkeys on your account.

What to do: Retry the request. If the error continues, contact support.

account_password_invalid

Invalid password · HTTP 400 Bad Request

The password is empty or longer than GraphOps accepts.

What to do: Enter a shorter password and try again.

account_removal_reconciliation_required

Previous removal pending · HTTP 409 Conflict

A previous removal of a passkey, session or connected account has not been confirmed yet.

What to do: Refresh the Account page and check the result of the previous removal, then try again.

account_resource_not_found

Passkey or session not found · HTTP 404 Not Found

The passkey or session you tried to remove is no longer on your account.

What to do: Refresh the Account page to see your current passkeys and sessions.

account_session_owner_mismatch

Session ownership not verified · HTTP 403 Forbidden

GraphOps could not verify that every session in the list belongs to your account, so it stopped.

What to do: Retry the request. If the error continues, contact support.

account_sessions_incomplete

Session list unavailable · HTTP 503 Service Unavailable

GraphOps could not load the complete list of sessions on your account.

What to do: Retry the request. If the error continues, contact support.

device_authorization_unavailable

Device code not valid · HTTP 400 Bad Request

The device code is invalid, has expired or has already been used.

What to do: Start sign-in again from the GraphOps CLI and enter the new code.

device_client_rejected

Application not allowed · HTTP 403 Forbidden

The device code was issued to an application that cannot sign in to GraphOps.

What to do: Only approve device codes started from the GraphOps CLI.

device_email_unverified

Email verification required · HTTP 403 Forbidden

Your account email is not verified, so you cannot approve the GraphOps CLI.

What to do: Verify your email in GraphOps, then start sign-in again from the CLI.

device_identity_unlinked

Provider account not connected · HTTP 403 Forbidden

The provider account you signed in with is not connected to a GraphOps account.

What to do: Create a GraphOps account or connect the provider to your account in GraphOps, then start again from the CLI.

device_mfa_required

Two-factor authentication required · HTTP 403 Forbidden

Approving a device requires two-factor authentication, and it was not completed.

What to do: Complete two-factor authentication, then approve the device.

device_scope_rejected

Requested access not allowed · HTTP 403 Forbidden

The device asked for access that GraphOps does not grant to the CLI.

What to do: Only approve device codes started from the GraphOps CLI.

device_session_invalid

Sign-in no longer valid · HTTP 403 Forbidden

The sign-in you used to approve the device has ended, or your account cannot sign in.

What to do: Sign in again and approve the device.

device_session_not_fresh

Recent sign-in required · HTTP 403 Forbidden

Approving a device requires a sign-in completed after you entered the device code.

What to do: Sign in again, then approve the device.

external_account_proof_required

Identity confirmation required · HTTP 403 Forbidden

Changing a connected account or sign-in method requires you to confirm your identity with a recent sign-in, including any security checks.

What to do: Sign in to your account again when prompted, then repeat the change.

external_account_unavailable

Account unavailable · HTTP 403 Forbidden

The account is deactivated or its access is disabled, so it cannot sign in or change connections.

What to do: Contact support if you think your account should be active.

external_account_verification_required

Email verification required · HTTP 403 Forbidden

The account email is not verified.

What to do: Verify the account's email, then try again.

external_auth_browser_mismatch

Different browser · HTTP 403 Forbidden

The sign-in attempt was continued in a different browser from the one that started it.

What to do: Continue in the browser where you started, or start sign-in again.

external_auth_client_unsafe

Sign-in configuration error · HTTP 403 Forbidden

GraphOps sign-in is not configured correctly, so the sign-in attempt was refused.

What to do: Contact support. Your account is not affected.

external_auth_concurrent_change

Sign-in attempt changed · HTTP 409 Conflict

The sign-in attempt was changed by another request, for example in another tab.

What to do: Reload the page to continue.

external_auth_expired

Sign-in attempt expired · HTTP 409 Conflict

The sign-in attempt took too long and has expired.

What to do: Start sign-in again.

external_auth_failed

Sign-in failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while continuing the sign-in attempt.

What to do: Start sign-in again. If the error continues, contact support.

external_auth_human_required

Signed-in user required · HTTP 403 Forbidden

Managing sign-in methods and connected accounts needs a signed-in user, not an API key or service credential.

What to do: Sign in to the GraphOps platform and try again.

external_auth_invalid_stage

Sign-in step not allowed · HTTP 409 Conflict

The sign-in attempt is not at a step where that action is allowed.

What to do: Reload the page to continue from the current step.

external_auth_login_unsafe

Sign-in page configuration error · HTTP 403 Forbidden

GraphOps sign-in pages are not configured correctly, so the sign-in attempt was refused.

What to do: Contact support. Your account is not affected.

external_auth_request_invalid

Invalid sign-in request · HTTP 400 Bad Request

The sign-in request is malformed or missing required information.

What to do: Start sign-in again from GraphOps.

external_auth_request_mismatch

Sign-in request does not match · HTTP 403 Forbidden

The sign-in request does not match the attempt that started it, for example a different provider or return address.

What to do: Start sign-in again from GraphOps.

external_connection_changed

Connected account changed · HTTP 409 Conflict

The connected account you selected changed or was removed after the page loaded.

What to do: Refresh your sign-in methods on the Account page and try again.

external_disconnect_reconciliation_required

Previous disconnection pending · HTTP 409 Conflict

A previous connected account removal has not been confirmed yet.

What to do: Refresh the Account page and check the result of the previous removal, then try again.

external_identity_conflict

Provider account conflict · HTTP 409 Conflict

The provider account cannot be connected to this GraphOps account, usually because it belongs to a different account.

What to do: Sign in with the GraphOps account the provider is already connected to, or use a different provider account.

external_identity_not_found

Account not found · HTTP 404 Not Found

The account for this sign-in or request no longer exists.

What to do: Start sign-in again. If you think the account should exist, contact support.

external_identity_realm_mismatch

Account not recognized · HTTP 409 Conflict

The account or sign-in session does not belong to GraphOps.

What to do: Start sign-in again from GraphOps and use your GraphOps account.

external_identity_response_invalid

Account details unavailable · HTTP 503 Service Unavailable

GraphOps could not read your account or sign-in details right now.

What to do: Retry after a short wait. If the error continues, contact support.

external_last_sign_in_method

Last sign-in method · HTTP 403 Forbidden

Removing this connected account would leave you without a usable sign-in method, or you did not confirm your identity with another method.

What to do: Set up a password or passkey or connect another account, sign in with that method, then remove this connection.

external_profile_required

Profile details required · HTTP 400 Bad Request

The email, first name or last name is missing or invalid.

What to do: Enter a valid email and your first and last names.

external_provider_configuration_invalid

Sign-in provider misconfigured · HTTP 403 Forbidden

This sign-in provider is not configured correctly in GraphOps.

What to do: Sign in with another method, or contact support.

external_provider_unavailable

Sign-in provider unavailable · HTTP 403 Forbidden

This sign-in provider is not available in GraphOps.

What to do: Sign in with another provider or method.

external_registration_unavailable

Provider registration unavailable · HTTP 403 Forbidden

You cannot create a GraphOps account with this sign-in provider.

What to do: Create your account with an email and password, or with another provider.

identity_provider_unavailable

Sign-in service unavailable · HTTP 503 Service Unavailable

GraphOps could not reach its sign-in service to verify your session.

What to do: Retry the request after a short wait. If the error continues, contact support.

missing_bearer_token

Missing bearer token · HTTP 401 Unauthorized

The request has no Authorization header with a bearer token.

What to do: Sign in again, or send the request with an Authorization: Bearer <token> header.

oidc_config_failed

Sign-in configuration unavailable · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while preparing its sign-in configuration.

What to do: Retry the request. If the error continues, contact support.

oidc_redirect_uri_invalid

Callback address not allowed · HTTP 400 Bad Request

The redirectUri is not a valid URL, or it is not a callback address GraphOps allows.

What to do: Omit redirectUri, or use the GraphOps platform callback address.

password_reset_email_delivery_failed

Password reset email not sent · HTTP 503 Service Unavailable

GraphOps could not send the password reset email.

What to do: Request a new password reset after a short wait. If the error continues, contact support.

password_reset_email_failed

Password reset email failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while sending the password reset email.

What to do: Request a new password reset. If the error continues, contact support.

principal_profile_upsert_failed

Profile could not be saved · HTTP 503 Service Unavailable

GraphOps verified your sign-in but could not save your profile.

What to do: Retry the request after a short wait. If the error continues, contact support.

reauthentication_required

Sign in again · HTTP 403 Forbidden

This action needs a recent sign-in, and your current sign-in is too old to confirm it is you.

What to do: Sign in again to continue.

registration_account_ambiguous

Multiple accounts match email · HTTP 409 Conflict

More than one account matches this email address.

What to do: Sign in to your existing account, or contact support.

registration_create_failed

Account creation failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while creating your account.

What to do: Try again. If the error continues, contact support.

registration_details_rejected

Account details rejected · HTTP 400 Bad Request

GraphOps rejected the submitted account details.

What to do: Check the details you entered and try again.

registration_disabled

Registration disabled · HTTP 403 Forbidden

GraphOps is not accepting new account registrations.

What to do: Contact support if you need an account.

registration_email_check_unavailable

Email address check unavailable · HTTP 503 Service Unavailable

GraphOps could not check whether the email address is a temporary address, so it cannot create new accounts right now. Existing accounts can still sign in.

What to do: Try again after a short wait. If the error continues, contact support.

registration_email_disposable

Temporary email address not accepted · HTTP 400 Bad Request

GraphOps does not create accounts with temporary or disposable email addresses.

What to do: Register with a permanent email address, such as your work email.

registration_email_send_failed

Verification email not sent · HTTP 503 Service Unavailable

GraphOps could not send the verification email.

What to do: Request a new verification email after a short wait.

registration_identity_provider_unavailable

Account service unavailable · HTTP 503 Service Unavailable

GraphOps could not reach its account service to complete the request.

What to do: Try again after a short wait. If the error continues, contact support.

registration_invitation_required

Invitation required · HTTP 403 Forbidden

New GraphOps accounts can only be created from an organization invitation.

What to do: Open the invitation link you received, or ask an organization owner to invite you.

registration_password_policy_rejected

Password too weak · HTTP 400 Bad Request

The password does not meet the GraphOps password requirements.

What to do: Choose a stronger password that meets the requirements shown on the form.

registration_rate_limit_unavailable

Registration temporarily unavailable · HTTP 503 Service Unavailable

GraphOps cannot accept registration requests right now.

What to do: Try again after a short wait. If the error continues, contact support.

registration_rate_limited

Too many registration attempts · HTTP 429 Too Many Requests

Too many registration or verification recovery attempts came from this email address or network.

What to do: Wait before you try again.

registration_recovery_failed

Verification recovery failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while sending a new verification email.

What to do: Try again. If the error continues, contact support.

registration_resend_failed

Verification resend failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while resending the verification email.

What to do: Try again. If the error continues, contact support.

registration_resend_rate_limited

Too many verification emails · HTTP 429 Too Many Requests

You requested verification emails too often.

What to do: Wait before you request another verification email. When the response includes retryAfterSeconds, wait that many seconds.

registration_token_secret_missing

Registration unavailable · HTTP 503 Service Unavailable

GraphOps cannot complete registration right now because of a configuration problem.

What to do: Try again later, or contact support.

registration_verification_expired

Verification expired · HTTP 409 Conflict

The email verification link or code has expired.

What to do: Request a new verification email, or register again.

registration_verification_invalid

Invalid verification · HTTP 400 Bad Request

The verification code is incorrect or already used, or the verification link is invalid or does not match the email address.

What to do: Check the code in your latest verification email, or request a new one.

registration_verification_rate_limit_unavailable

Email verification unavailable · HTTP 503 Service Unavailable

GraphOps cannot check email verification codes right now.

What to do: Try again after a short wait. If the error continues, contact support.

registration_verification_rate_limited

Too many verification attempts · HTTP 429 Too Many Requests

Too many incorrect verification codes were entered.

What to do: Request a new verification email and enter the new code.

registration_verify_failed

Email verification failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while verifying your email.

What to do: Try again. If the error continues, contact support.

request_authentication_failed

Authentication failed unexpectedly · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while checking the credentials on the request.

What to do: Retry the request. If the error continues, contact support.

service_request_authentication_failed

Service authentication failed unexpectedly · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while checking the service credential on the request.

What to do: Retry the request. If the error continues, contact support.

service_token_verification_failed

Service credential required · HTTP 401 Unauthorized

This route accepts only GraphOps service credentials, and the request did not send a valid one.

What to do: Use the GraphOps platform or docs to perform this action instead of calling the route directly.

session_admission_failed

Session authorization failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while authorizing your session.

What to do: Retry the request. If the error continues, sign in again or contact support.

session_authorization_failed

Session check failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while checking your session.

What to do: Retry the request. If the error continues, sign in again or contact support.

session_expired

Session expired · HTTP 401 Unauthorized

Your sign-in session has expired.

What to do: Sign in again.

session_verification_failed

Session verification failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while verifying your session.

What to do: Retry the request. If the error continues, sign in again or contact support.

token_verification_failed

Invalid access token · HTTP 401 Unauthorized

The bearer token is invalid, expired or was not issued for the GraphOps platform, or the CLI session that approved it has ended.

What to do: Sign in again in the GraphOps platform or the GraphOps CLI to get a new token.

Last updated