In this story
Team sign-in (admin)
| Code | You see | Why and what to do |
|---|---|---|
| INVALID_CREDENTIALS | "The email or password is wrong." | A wrong email or password. Check both. |
| TOO_MANY_ATTEMPTS | "Too many sign-in attempts. Try again in a minute." | Wait a minute. |
| RATE_LIMITED | "Too many requests. Try again in {seconds} seconds." | Wait the time shown. |
| MFA_REQUIRED | "Enter the 6-digit code from your authenticator app." | Two-step sign-in is on. Type the current code. |
| INVALID_TOTP | "That code didn’t work. Check the time on your phone and try a new code." | Turn on automatic time on your phone. Use the newest code. |
| ACCOUNT_DISABLED | "This account is disabled. Ask the site owner for help." | The owner turned your account off. |
| INVITE_EXPIRED | "This invite has expired. Ask the site owner for a new one." | Ask for a new invite. |
| INVITE_REVOKED | "This invite was cancelled. Ask the site owner for a new one." | Ask for a new invite. |
| INVITE_USED | "This invite was already used. Sign in instead." | Use the normal sign-in page. |
| SESSION_REQUIRED | "Please sign in." | Your session ended. Sign in again. |
| REAUTH_REQUIRED | "For your security, sign in again to do this." | Confirm it's you to continue. |
| CSRF_INVALID | "The security token is missing or out of date. Reload the page and try again." | Reload the page. |
| PERMISSION_DENIED | "You do not have permission to do this." | Ask the owner to change your role. |
| LAST_OWNER | "The site needs at least one active owner." | Make someone else an owner first. |
| GRANT_INVALID | "This setup link is not valid. Open a new one from your Keynate dashboard." | Open a new link in Keynate Console. |
| GRANT_USED | "This setup link was already used. Sign in instead." | Sign in normally. |
| SETUP_ALREADY_DONE | "This site is already set up. Sign in instead." | Sign in normally. |
Two-step sign-in
| Code | You see | Why and what to do |
|---|---|---|
| MFA_ENROLMENT_REQUIRED | "Turn on two-step sign-in to keep using the admin." | Your role needs it. Set it up. |
| MFA_REQUIRED_BY_POLICY | "Your site requires two-step sign-in for your role, so it can’t be turned off." | The owner set the rule. |
| MFA_NOT_ENABLED | "Turn on two-step sign-in first." | Set it up before you use this. |
| MFA_ALREADY_ENABLED | "Two-step sign-in is already on." | Nothing to do. |
Company sign-in (single sign-on)
| Code | You see | Why and what to do |
|---|---|---|
| SSO_REQUIRED | "This newsroom uses company sign-in. Use the company sign-in button." | Use the company button. |
| SSO_NOT_ENABLED | "Single sign-on is not turned on for this newsroom." | The owner has to turn it on. |
| SSO_STATE_INVALID | "This sign-in link expired or was opened in another browser. Start again." | Start again in one browser. |
| SSO_SIGN_IN_FAILED | "Sign-in with your company account didn’t work. Start again." | Try again. |
| SSO_DOMAIN_NOT_ALLOWED | "This account’s email domain can’t sign in to this newsroom. Use your work account." | Use an allowed account. |
| SSO_NO_ACCOUNT | "You’re not on this newsroom’s team yet. Ask the site owner to invite you." | Ask the owner for an invite. |
| SSO_OWNER_USES_PASSWORD | "Owners sign in with their password and two-step code." | Use your password. |
| SSO_ACCOUNT_LINKED_ELSEWHERE | "This team member is already connected to a different company account. Ask the site owner for help." | Ask the owner. |
| SSO_PROVIDER_UNAVAILABLE | "Your company sign-in service is not answering. Try again in a few minutes." | Try later. |
| SSO_DISCOVERY_FAILED | "We couldn’t reach your sign-in provider at this issuer URL. Check it and try again." | The owner should check the address. |
Readers (sign-in on the website or app)
| Code | You see | Why and what to do |
|---|---|---|
| CHALLENGE_EXPIRED | "This code has expired or was already used. Get a new code." | Ask for a new code. |
| CHALLENGE_FAILED | "That code isn’t right. {n} tries left." | Check the code. After the last try, get a new code. |
| CHALLENGE_LOCKED | "Too many wrong codes for this address or number. Try again in 24 hours." | Wait 24 hours. |
| SIGN_IN_METHOD_DISABLED | "This way of signing in is turned off. Choose another one." | Use another method. |
| PROVIDER_TOKEN_INVALID | "The sign-in didn’t finish. Try again or use another way to sign in." | Try again. |
| READER_BLOCKED | "This account can’t sign in. Contact us if you think this is a mistake." | Contact the site. |
| UNAUTHENTICATED | "Please sign in." | Sign in. |
| REFRESH_REUSED | "This sign-in was used on another device. Sign in again." | Sign in again. |
| HUMAN_CHECK_FAILED | "We couldn’t check that you’re human. Try again." | Try again. |
| HUMAN_CHECK_UNAVAILABLE | "The human check isn’t working right now. Try again in a minute." | Wait a minute. |
Set-up errors for the owner
| Code | You see | Why and what to do |
|---|---|---|
| GOOGLE_NOT_CONFIGURED | "Add the Google web client ID first." | Finish the Google sign-in set-up. See Sign in with Google. |
| GOOGLE_SECRET_MISSING | "Add the Google client secret to test the connection with Google." | Add the secret. |
Questions
Frequently asked questions
Where do I see the code?
The notice shows only the message. This page lists the code next to each message. If you contact support, send us the message and what you did.
Why does a code vary between admin and readers?
Team members and readers sign in by different routes, so the messages differ.