The Identity Server has standard error messages for different authentication errors that are encountered. See Error Codes and Descriptions for more information on the standard error codes and descriptions of those errors. There are three types of custom errors handled here:
- Invalid credentials
- Invalid User
- Account Lock
Note: Account Lock errors are returned only when account locking is enabled in the server.
Do the following to customize these error messages.
Enable the following parameter in the
<IS_HOME>/repository/conf/security/application-authentication.xml file if you need customized error messages.
We send the following query parameters to the authentication endpoint web application and you can customize the error messages according to 'errorCode'.