# Sign-in and account errors

Source: https://docs.graphops.xyz/platform/errors/account

Each error below is identified by the `code` in the [error response](/platform/errors#error-response). The response's `docsUrl` links to the matching entry on this page.

## `account_change_unconfirmed`

Account change not confirmed · HTTP 409 Conflict

GraphOps may have applied your change to a sign-in method, session or connected account, but could not confirm the result.

**What to do:** Refresh the Account page and check the result before you make another change.

## `account_credential_disabled`

Sign-in method not available · HTTP 403 Forbidden

The sign-in method you tried to set up is not available for your account.

**What to do:** Set up a different sign-in method, such as a passkey or a connected account.

## `account_credential_reconciliation_required`

Previous sign-in method change pending · HTTP 409 Conflict

A previous sign-in method change on your account has not been confirmed yet, so GraphOps will not start another one.

**What to do:** Open the Account page, check the result of your previous change, then try again.

## `account_disabled`

Account access disabled · HTTP 403 Forbidden

Access to GraphOps is disabled for your account.

**What to do:** Contact support if you think your access should be active.

## `account_management_failed`

Account update failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while updating your account security settings.

**What to do:** Refresh the Account page and check whether the change was applied. If the error continues, contact support.

## `account_mfa_change_pending`

Two-factor change in progress · HTTP 409 Conflict

Another two-factor authentication change on your account is still being confirmed.

**What to do:** Check two-factor authentication on the Account page, then make the change again if it is still needed.

## `account_other_method_required`

Another sign-in method required · HTTP 403 Forbidden

This passkey is your only way to sign in, so removing it would lock you out of your account.

**What to do:** Set up a password or connect a sign-in provider, then remove the passkey.

## `account_passkey_challenge_invalid`

Passkey response does not match · HTTP 400 Bad Request

The passkey response does not belong to the passkey setup you started, or it came from another site.

**What to do:** Start a new passkey setup from the Account page and complete it in the same browser.

## `account_passkey_invalid`

Invalid passkey · HTTP 400 Bad Request

The passkey name is missing or the passkey response is invalid or was rejected.

**What to do:** Enter a passkey name and start a new passkey setup.

## `account_passkeys_incomplete`

Passkey list unavailable · HTTP 503 Service Unavailable

GraphOps could not load the complete list of passkeys on your account.

**What to do:** Retry the request. If the error continues, contact support.

## `account_password_invalid`

Invalid password · HTTP 400 Bad Request

The password is empty or longer than GraphOps accepts.

**What to do:** Enter a shorter password and try again.

## `account_removal_reconciliation_required`

Previous removal pending · HTTP 409 Conflict

A previous removal of a passkey, session or connected account has not been confirmed yet.

**What to do:** Refresh the Account page and check the result of the previous removal, then try again.

## `account_resource_not_found`

Passkey or session not found · HTTP 404 Not Found

The passkey or session you tried to remove is no longer on your account.

**What to do:** Refresh the Account page to see your current passkeys and sessions.

## `account_session_owner_mismatch`

Session ownership not verified · HTTP 403 Forbidden

GraphOps could not verify that every session in the list belongs to your account, so it stopped.

**What to do:** Retry the request. If the error continues, contact support.

## `account_sessions_incomplete`

Session list unavailable · HTTP 503 Service Unavailable

GraphOps could not load the complete list of sessions on your account.

**What to do:** Retry the request. If the error continues, contact support.

## `device_authorization_unavailable`

Device code not valid · HTTP 400 Bad Request

The device code is invalid, has expired or has already been used.

**What to do:** Start sign-in again from the GraphOps CLI and enter the new code.

## `device_client_rejected`

Application not allowed · HTTP 403 Forbidden

The device code was issued to an application that cannot sign in to GraphOps.

**What to do:** Only approve device codes started from the GraphOps CLI.

## `device_email_unverified`

Email verification required · HTTP 403 Forbidden

Your account email is not verified, so you cannot approve the GraphOps CLI.

**What to do:** Verify your email in GraphOps, then start sign-in again from the CLI.

## `device_identity_unlinked`

Provider account not connected · HTTP 403 Forbidden

The provider account you signed in with is not connected to a GraphOps account.

**What to do:** Create a GraphOps account or connect the provider to your account in GraphOps, then start again from the CLI.

## `device_mfa_required`

Two-factor authentication required · HTTP 403 Forbidden

Approving a device requires two-factor authentication, and it was not completed.

**What to do:** Complete two-factor authentication, then approve the device.

## `device_scope_rejected`

Requested access not allowed · HTTP 403 Forbidden

The device asked for access that GraphOps does not grant to the CLI.

**What to do:** Only approve device codes started from the GraphOps CLI.

## `device_session_invalid`

Sign-in no longer valid · HTTP 403 Forbidden

The sign-in you used to approve the device has ended, or your account cannot sign in.

**What to do:** Sign in again and approve the device.

## `device_session_not_fresh`

Recent sign-in required · HTTP 403 Forbidden

Approving a device requires a sign-in completed after you entered the device code.

**What to do:** Sign in again, then approve the device.

## `external_account_proof_required`

Identity confirmation required · HTTP 403 Forbidden

Changing a connected account or sign-in method requires you to confirm your identity with a recent sign-in, including any security checks.

**What to do:** Sign in to your account again when prompted, then repeat the change.

## `external_account_unavailable`

Account unavailable · HTTP 403 Forbidden

The account is deactivated or its access is disabled, so it cannot sign in or change connections.

**What to do:** Contact support if you think your account should be active.

## `external_account_verification_required`

Email verification required · HTTP 403 Forbidden

The account email is not verified.

**What to do:** Verify the account's email, then try again.

## `external_auth_browser_mismatch`

Different browser · HTTP 403 Forbidden

The sign-in attempt was continued in a different browser from the one that started it.

**What to do:** Continue in the browser where you started, or start sign-in again.

## `external_auth_client_unsafe`

Sign-in configuration error · HTTP 403 Forbidden

GraphOps sign-in is not configured correctly, so the sign-in attempt was refused.

**What to do:** Contact support. Your account is not affected.

## `external_auth_concurrent_change`

Sign-in attempt changed · HTTP 409 Conflict

The sign-in attempt was changed by another request, for example in another tab.

**What to do:** Reload the page to continue.

## `external_auth_expired`

Sign-in attempt expired · HTTP 409 Conflict

The sign-in attempt took too long and has expired.

**What to do:** Start sign-in again.

## `external_auth_failed`

Sign-in failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while continuing the sign-in attempt.

**What to do:** Start sign-in again. If the error continues, contact support.

## `external_auth_human_required`

Signed-in user required · HTTP 403 Forbidden

Managing sign-in methods and connected accounts needs a signed-in user, not an API key or service credential.

**What to do:** Sign in to the GraphOps platform and try again.

## `external_auth_invalid_stage`

Sign-in step not allowed · HTTP 409 Conflict

The sign-in attempt is not at a step where that action is allowed.

**What to do:** Reload the page to continue from the current step.

## `external_auth_login_unsafe`

Sign-in page configuration error · HTTP 403 Forbidden

GraphOps sign-in pages are not configured correctly, so the sign-in attempt was refused.

**What to do:** Contact support. Your account is not affected.

## `external_auth_request_invalid`

Invalid sign-in request · HTTP 400 Bad Request

The sign-in request is malformed or missing required information.

**What to do:** Start sign-in again from GraphOps.

## `external_auth_request_mismatch`

Sign-in request does not match · HTTP 403 Forbidden

The sign-in request does not match the attempt that started it, for example a different provider or return address.

**What to do:** Start sign-in again from GraphOps.

## `external_connection_changed`

Connected account changed · HTTP 409 Conflict

The connected account you selected changed or was removed after the page loaded.

**What to do:** Refresh your sign-in methods on the Account page and try again.

## `external_disconnect_reconciliation_required`

Previous disconnection pending · HTTP 409 Conflict

A previous connected account removal has not been confirmed yet.

**What to do:** Refresh the Account page and check the result of the previous removal, then try again.

## `external_identity_conflict`

Provider account conflict · HTTP 409 Conflict

The provider account cannot be connected to this GraphOps account, usually because it belongs to a different account.

**What to do:** Sign in with the GraphOps account the provider is already connected to, or use a different provider account.

## `external_identity_not_found`

Account not found · HTTP 404 Not Found

The account for this sign-in or request no longer exists.

**What to do:** Start sign-in again. If you think the account should exist, contact support.

## `external_identity_realm_mismatch`

Account not recognized · HTTP 409 Conflict

The account or sign-in session does not belong to GraphOps.

**What to do:** Start sign-in again from GraphOps and use your GraphOps account.

## `external_identity_response_invalid`

Account details unavailable · HTTP 503 Service Unavailable

GraphOps could not read your account or sign-in details right now.

**What to do:** Retry after a short wait. If the error continues, contact support.

## `external_last_sign_in_method`

Last sign-in method · HTTP 403 Forbidden

Removing this connected account would leave you without a usable sign-in method, or you did not confirm your identity with another method.

**What to do:** Set up a password or passkey or connect another account, sign in with that method, then remove this connection.

## `external_profile_required`

Profile details required · HTTP 400 Bad Request

The email, first name or last name is missing or invalid.

**What to do:** Enter a valid email and your first and last names.

## `external_provider_configuration_invalid`

Sign-in provider misconfigured · HTTP 403 Forbidden

This sign-in provider is not configured correctly in GraphOps.

**What to do:** Sign in with another method, or contact support.

## `external_provider_unavailable`

Sign-in provider unavailable · HTTP 403 Forbidden

This sign-in provider is not available in GraphOps.

**What to do:** Sign in with another provider or method.

## `external_registration_unavailable`

Provider registration unavailable · HTTP 403 Forbidden

You cannot create a GraphOps account with this sign-in provider.

**What to do:** Create your account with an email and password, or with another provider.

## `identity_provider_unavailable`

Sign-in service unavailable · HTTP 503 Service Unavailable

GraphOps could not reach its sign-in service to verify your session.

**What to do:** Retry the request after a short wait. If the error continues, contact support.

## `missing_bearer_token`

Missing bearer token · HTTP 401 Unauthorized

The request has no `Authorization` header with a bearer token.

**What to do:** Sign in again, or send the request with an `Authorization: Bearer <token>` header.

## `oidc_config_failed`

Sign-in configuration unavailable · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while preparing its sign-in configuration.

**What to do:** Retry the request. If the error continues, contact support.

## `oidc_redirect_uri_invalid`

Callback address not allowed · HTTP 400 Bad Request

The `redirectUri` is not a valid URL, or it is not a callback address GraphOps allows.

**What to do:** Omit `redirectUri`, or use the GraphOps platform callback address.

## `password_reset_email_delivery_failed`

Password reset email not sent · HTTP 503 Service Unavailable

GraphOps could not send the password reset email.

**What to do:** Request a new password reset after a short wait. If the error continues, contact support.

## `password_reset_email_failed`

Password reset email failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while sending the password reset email.

**What to do:** Request a new password reset. If the error continues, contact support.

## `principal_profile_upsert_failed`

Profile could not be saved · HTTP 503 Service Unavailable

GraphOps verified your sign-in but could not save your profile.

**What to do:** Retry the request after a short wait. If the error continues, contact support.

## `reauthentication_required`

Sign in again · HTTP 403 Forbidden

This action needs a recent sign-in, and your current sign-in is too old to confirm it is you.

**What to do:** Sign in again to continue.

## `registration_account_ambiguous`

Multiple accounts match email · HTTP 409 Conflict

More than one account matches this email address.

**What to do:** Sign in to your existing account, or contact support.

## `registration_create_failed`

Account creation failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while creating your account.

**What to do:** Try again. If the error continues, contact support.

## `registration_details_rejected`

Account details rejected · HTTP 400 Bad Request

GraphOps rejected the submitted account details.

**What to do:** Check the details you entered and try again.

## `registration_disabled`

Registration disabled · HTTP 403 Forbidden

GraphOps is not accepting new account registrations.

**What to do:** Contact support if you need an account.

## `registration_email_check_unavailable`

Email address check unavailable · HTTP 503 Service Unavailable

GraphOps could not check whether the email address is a temporary address, so it cannot create new accounts right now. Existing accounts can still sign in.

**What to do:** Try again after a short wait. If the error continues, contact support.

## `registration_email_disposable`

Temporary email address not accepted · HTTP 400 Bad Request

GraphOps does not create accounts with temporary or disposable email addresses.

**What to do:** Register with a permanent email address, such as your work email.

## `registration_email_send_failed`

Verification email not sent · HTTP 503 Service Unavailable

GraphOps could not send the verification email.

**What to do:** Request a new verification email after a short wait.

## `registration_identity_provider_unavailable`

Account service unavailable · HTTP 503 Service Unavailable

GraphOps could not reach its account service to complete the request.

**What to do:** Try again after a short wait. If the error continues, contact support.

## `registration_invitation_required`

Invitation required · HTTP 403 Forbidden

New GraphOps accounts can only be created from an organization invitation.

**What to do:** Open the invitation link you received, or ask an organization owner to invite you.

## `registration_password_policy_rejected`

Password too weak · HTTP 400 Bad Request

The password does not meet the GraphOps password requirements.

**What to do:** Choose a stronger password that meets the requirements shown on the form.

## `registration_rate_limit_unavailable`

Registration temporarily unavailable · HTTP 503 Service Unavailable

GraphOps cannot accept registration requests right now.

**What to do:** Try again after a short wait. If the error continues, contact support.

## `registration_rate_limited`

Too many registration attempts · HTTP 429 Too Many Requests

Too many registration or verification recovery attempts came from this email address or network.

**What to do:** Wait before you try again.

## `registration_recovery_failed`

Verification recovery failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while sending a new verification email.

**What to do:** Try again. If the error continues, contact support.

## `registration_resend_failed`

Verification resend failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while resending the verification email.

**What to do:** Try again. If the error continues, contact support.

## `registration_resend_rate_limited`

Too many verification emails · HTTP 429 Too Many Requests

You requested verification emails too often.

**What to do:** Wait before you request another verification email. When the response includes `retryAfterSeconds`, wait that many seconds.

## `registration_token_secret_missing`

Registration unavailable · HTTP 503 Service Unavailable

GraphOps cannot complete registration right now because of a configuration problem.

**What to do:** Try again later, or contact support.

## `registration_verification_expired`

Verification expired · HTTP 409 Conflict

The email verification link or code has expired.

**What to do:** Request a new verification email, or register again.

## `registration_verification_invalid`

Invalid verification · HTTP 400 Bad Request

The verification code is incorrect or already used, or the verification link is invalid or does not match the email address.

**What to do:** Check the code in your latest verification email, or request a new one.

## `registration_verification_rate_limit_unavailable`

Email verification unavailable · HTTP 503 Service Unavailable

GraphOps cannot check email verification codes right now.

**What to do:** Try again after a short wait. If the error continues, contact support.

## `registration_verification_rate_limited`

Too many verification attempts · HTTP 429 Too Many Requests

Too many incorrect verification codes were entered.

**What to do:** Request a new verification email and enter the new code.

## `registration_verify_failed`

Email verification failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while verifying your email.

**What to do:** Try again. If the error continues, contact support.

## `request_authentication_failed`

Authentication failed unexpectedly · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while checking the credentials on the request.

**What to do:** Retry the request. If the error continues, contact support.

## `service_request_authentication_failed`

Service authentication failed unexpectedly · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while checking the service credential on the request.

**What to do:** Retry the request. If the error continues, contact support.

## `service_token_verification_failed`

Service credential required · HTTP 401 Unauthorized

This route accepts only GraphOps service credentials, and the request did not send a valid one.

**What to do:** Use the GraphOps platform or docs to perform this action instead of calling the route directly.

## `session_admission_failed`

Session authorization failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while authorizing your session.

**What to do:** Retry the request. If the error continues, sign in again or contact support.

## `session_authorization_failed`

Session check failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while checking your session.

**What to do:** Retry the request. If the error continues, sign in again or contact support.

## `session_expired`

Session expired · HTTP 401 Unauthorized

Your sign-in session has expired.

**What to do:** Sign in again.

## `session_verification_failed`

Session verification failed · HTTP 500 Internal Server Error

GraphOps hit an unexpected error while verifying your session.

**What to do:** Retry the request. If the error continues, sign in again or contact support.

## `token_verification_failed`

Invalid access token · HTTP 401 Unauthorized

The bearer token is invalid, expired or was not issued for the GraphOps platform, or the CLI session that approved it has ended.

**What to do:** Sign in again in the GraphOps platform or the GraphOps CLI to get a new token.