MfaCodeInvalid

⌛

Connecting

MfaCodeInvalid occurs when the user provides a multi-factor authentication (MFA) code, but the provider rejects it as incorrect. This may be due to a typo, expired code, or a code from the wrong delivery method.

Implications

• The session is still active, but cannot proceed until a valid code is submitted.
• No data is retrieved at this point.
• The user can retry entering a new code within the allowed time window.

Expected Developer Action

• Notify the user that the MFA code was invalid.
• Prompt them to check the latest code from the provider and try again.
• Ensure your interface allows the user to re-enter a new code without restarting the connection.

Possible Previous Statuses:

• MfaCodeRequired

Possible Next Statuses:

• MfaCodeTimeout - If no valid code is entered within the session window, the status may eventually transition to this
• ConnectedCredentials - if the user provide an valid code