Error handling

User with email that does not match allowed email domains is trying to log in via IdP

You are not allowed to log in because your email does not correspond to one of the allowed domains: . Please contact your system administrator.

Using external API with authentication method user isn't allowed to use. E.g. API user is assigned to OAuth2 IdP but tries to reach API via Basic Auth

HTTP Status 401 - Auth method not allowed

Existing user who is not linked to IdP yet tries to log in via this IdP

You are not allowed to log in with this authentication method, please contact your system administrator

Inactivated user previously assigned to an IdP tries to log in via this IdP

User to be reactivated

User with the expired account who was previously assigned to an IdP tries to log in via this IdP

Your account has expired, please contact your system administrator. User not found:

Linking existing user to an IdP when his email doesn't match IdP domains

User  with email  doesn't match email domains of IdP

Deleting an IdP that has users assigned

Identity provider cannot be deleted because it has  linked users

Adding Login URL which is already being used on another site

This Login URL is already in use