Type Alias: IdentityProviderErrorCode

IdentityProviderErrorCode = "unreachable" | "credential_refused" | "forbidden" | "not_found" | "conflict" | "rejected" | "unsupported" | "not_managed" | "direct_grants_remain" | "unexpected"

Defined in: packages/identity/src/errors.ts:18

Why a call to the identity provider did not do what was asked. The code says what the caller should do next, so that no caller has to read a message to decide.

Code	What the caller does
unreachable	Could not check. Retry; never treat as a refusal (indeterminate)
credential_refused	The management credential was refused. Fix the secret; do not retry
forbidden	The credential is valid and lacks a capability. Report it as missing (a partial outcome)
not_found	The realm or object the call names does not exist. Ensure it first
conflict	The object exists in a form this engine does not own, or two writers raced. Do not overwrite
rejected	The provider refused the content (a policy, a malformed value). Fix the input
unsupported	This provider has no way to do it. Not an error of the input; see probe()
not_managed	The object exists and is not the engine's to change: it does not carry the managed marker, or it is one of the provider's built-in clients
direct_grants_remain	assertNoDirectGrants found a client that still allows the direct grant after it tried to turn it off
unexpected	The provider answered something this adapter does not understand