Error Codes
If an error code starting with APIGW is returned after you call an API, rectify the fault by referring to the instructions provided in API Gateway Error Codes.
| Status Code | Error Code | Error Message | Description | Solution |
|---|---|---|---|---|
| 400 | IIC.400 | Bad Request: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 404 | IIC.400 | Bad Request: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 404 | IIC.404 | Not Found: {0}. | Resource not found. | Check whether the resource exists. |
| 403 | IIC.1000 | No permission for action {0}. | Insufficient permissions. | Check whether you have required permissions. |
| 403 | IIC.1001 | Access denied: {0} | The dependent API cannot be accessed. | Check whether you have required and dependent permissions. |
| 404 | IIC.1002 | Bad Request: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 403 | IIC.1003 | Bad Request: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 403 | IIC.1004 | Bad Request: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 409 | IIC.1006 | Concurrency conflicts. Try again later. | Concurrency conflicts. Try again later. | Check whether the request parameters conflict and try again. |
| 409 | IIC.1007 | Data modification failed. | Modification failed. | Check whether any data conflicts occur. |
| 409 | IIC.1204 | The permission set already exists. | Permission set already created. | Check whether the permission set has already been created. |
| 404 | IIC.1205 | The permission set does not exist. | Permission set not found. | Check whether the permission set exists. |
| 409 | IIC.1206 | A permission set with the same name already exists. | Duplicate permission set name. | Check whether the permission set with the same name has already been created. |
| 409 | IIC.1207 | Duplicate system-defined policy or identity policy. | Duplicate system-defined policy or identity policy. | Check whether the same system-defined policy or identity policy has been attached to the permission set. |
| 500 | IIC.1209 | Bad Request: {0}. | Organizations operation error. | Contact technical support. |
| 400 | IIC.1210 | Account not found. | Account not found. | Check whether the account exists and is managed in Organizations. |
| 409 | IIC.1210 | The permission set has been attached to accounts and cannot be deleted. | The permission set has been attached to accounts and cannot be deleted. | Detach the permission set and try again. |
| 404 | IIC.1211 | System-defined policy or identity policy not found. | System-defined policy or identity policy not found. | Check whether the system-defined policy or identity policy has been attached to the permission set. |
| 404 | IIC.1212 | Request ID not found. | Request identified by the ID not found. | Check whether the request ID is correct. |
| 400 | IIC.1214 | Region not registered in the service. | Region not registered. | Check whether the region has been registered. |
| 403 | IIC.1215 | This operation is available only for the organization's administrator. | Only the Organizations administrator has permission to perform this operation. | Log in as the Organizations administrator and try again. |
| 409 | IIC.1216 | Only one region can be registered. | Only one region can be registered. | Check whether another region has been registered. |
| 404 | IIC.1217 | HTTP request header {0} not found. | HTTP request header not found. | Check whether the required HTTP request header is contained. |
| 400 | IIC.1218 | Invalid X-Request-Proof request header. | Invalid request proof header. | Check whether the request proof header is correct. |
| 400 | IIC.1219 | Failed to obtain the identity token. | Failed to obtain the temporary credential. | Check whether the request proof header used to obtain the temporary credential is correct. |
| 403 | IIC.1219 | Failed to obtain the identity token. | Failed to obtain the temporary credential. | Check whether the request proof header used to obtain the temporary credential is valid. |
| 400 | IIC.1220 | Failed to create service-linked agencies. Try again later. | Failed to create service-linked agencies. Try again later. | Check whether the request parameter is correct. |
| 400 | IIC.1221 | Failed to enable trusted services. Try again later. | Failed to enable the trusted service. Failed to integrate IAM Identity Center with Organizations. | Check whether the request parameter is correct. |
| 409 | IIC.1222 | IAM Identity Center has been enabled in another region. | Account ID already in use. | Check whether a service instance has been created for the account. |
| 400 | IIC.1223 | Organizations not enabled. | Organizations not enabled. | Enable Organizations first. |
| 404 | IIC.1225 | Failed to update the permission set status because the permission set is not attached to accounts. | Authentication failed because the permission set is not attached to the account. | Attach the permission set to the account. |
| 400 | IIC.1227 | Identity source creation failed. | Failed to create the identity source. | Check whether the request parameter is correct. |
| 500 | IIC.1227 | Identity source creation failed. | Failed to create the identity source. | Contact technical support. |
| 400 | IIC.1228 | Identity source deletion failed. | Failed to delete the identity source. | Check whether the request parameter is correct. |
| 500 | IIC.1229 | No service instance can be deleted. | Failed to delete the identity source. | Contact technical support. |
| 400 | IIC.1230 | Service-linked agency deletion failed. | Failed to delete the service-linked agency. | Check whether the request parameter is correct. |
| 400 | IIC.1231 | Failed to query the groups which the user belongs to. | Failed to query the groups where the user is added. | Check whether the request parameter is correct. |
| 500 | IIC.1231 | Failed to query the groups which the user belongs to. | Failed to query the groups where the user is added. | Contact technical support. |
| 400 | IIC.1236 | Invalid {0} | Invalid parameter. | Check whether the request parameter is valid. |
| 403 | IIC.1242 | Please enable the service instance first. | Service instance not enabled. | Enable the service instance first. |
| 400 | IIC.1243 | Failed to create the trust agency. | Failed to create the trust agency. | Check whether the request parameter is correct. |
| 400 | IIC.1244 | Authentication failed. | Failed to check permissions. | Check whether the request parameter is correct. |
| 403 | IIC.1244 | Authentication failed. | Failed to check permissions. | Check whether you have permission to perform this operation. |
| 500 | IIC.1244 | Authentication failed. | Failed to check permissions. | Contact technical support. |
| 400 | IIC.1245 | Only one instance can be provisioned. | Only one instance can be enabled. | Check whether the instance has been enabled. |
| 400 | IIC.1246 | System-defined identity policy whose ID is {0} not found. | System-defined identity policy whose ID is {policyId} not found. | Check whether the ID of the system-defined identity policy is correct. |
| 500 | IIC.1247 | Failed to delete the trust agency. | Failed to delete the trust agency. | Contact technical support. |
| 500 | IIC.1248 | Failed to query the trust agency. | Failed to query the trust agency. | Contact technical support. |
| 400 | IIC.1249 | Deletion failed. Associated account not found. | Associated account is not found and cannot be deleted. | Check whether the permission set is attached to the account. |
| 400 | IIC.1250 | Associated principal is not found and cannot be deleted. | Associated principal is not found and cannot be deleted. | Check whether the permission set is attached to the principal. |
| 400 | IIC.1252 | Incorrect format of the X-Request-Proof request header. | Failed to parse the HTTP authorization header. | Check whether the format of the HTTP authorization header is correct. |
| 400 | IIC.1253 | Failed to deregister the region because an associated service instance exists. | The region cannot be deleted when the service instance exists. | Disable the service instance first. |
| 404 | IIC.1254 | No region registered. | Registered region not found. | Check whether the region has been registered. |
| 409 | IIC.1257 | Duplicate entity objects. | Duplicate entity objects. | Check whether the data already exists. |
| 400 | IIC.1258 | The start time cannot be later than the end time. | The start time cannot be later than the end time. | Ensure that the start time is earlier than the end time. |
| 404 | IIC.1259 | Service instance not found. | Instance not found. | Check whether the service instance is created. |
| 500 | IIC.1260 | Internal server error. | Internal service error. | Contact technical support. |
| 400 | IIC.1261 | Failed to obtain the identity source information. | Failed to query the connected identity source. | Check whether the identity source exists. |
| 404 | IIC.1000 | No permission to attach the account. | You do not have permission to attach the account. | Check whether the account has been added to Organizations. |
| 409 | IIC.1000 | This account does not have this service instance. | The service instance is not found in this account. | Check whether the account ID and instance ID are correct. |
| 409 | IIC.1261 | Failed to permanently delete SDR meter database data fields. | Failed to permanently delete data fields from the SDR meter database. | Check whether the data already exists. |
| 400 | IIC.1263 | The account has not applied for OBT. | You have not applied for an OBT. | Apply for an OBT first. |
| 400 | IIC.1264 | Account tag query failed. | An error occurred in account tag query. | Check whether the request parameter is correct. |
| 403 | IIC.1265 | HTTP request header not found. | HTTP request header not found. | Check whether the required HTTP request header is contained. |
| 400 | IIC.1266 | HTTP request header not found. | Invalid HTTP request header. | Check whether the HTTP request header is valid. |
| 400 | IIC.1267 | Synchronization failure: account:{0}, permissionSet:{1}, The detailed causes of the failure:{2}. | Failed to bind the authorization. | Check whether the request parameter is correct. |
| 403 | IIC.1269 | Failed to request for assuming with service principal. | Failed to obtain the agency credential. | Check whether you have permission to perform this operation. |
| 400 | IIC.1270 | Failed to obtain the MFA settings of the identity source. | Failed to obtain the MFA settings of the identity source. | Check whether the request parameter is correct. |
| 409 | IIC.1270 | The alias can be modified only once. | Identity source ID alias has been created. | Check whether the identity source ID alias has been created. |
| 400 | IIC.1271 | Failed to update the MFA settings of the identity source. | Failed to update the MFA settings of the identity source. | Check whether the request parameter is correct. |
| 409 | IIC.1271 | The alias already exists. | Duplicate identity source ID alias. | Change the alias. |
| 403 | IIC.1272 | No permission to perform this operation. | You do not have permission to enable or disable the service instance. | Check whether you have required permissions. |
| 400 | IIC.1273 | The identity source does not belong to the account. | The identity source does not belong to the account. | Check whether the identity source belongs to the corresponding management account. |
| 403 | IIC.1273 | The operation is not allowed because the account is frozen. | Account frozen. Operation not allowed. | Check whether the account is frozen. |
| 403 | IIC.1274 | The operation is not allowed because the account is restricted. | Account restricted. Operation not allowed. | Check whether the account is restricted. |
| 400 | IIC.1275 | The region is invalid or IAM Identity Center cannot be enabled in the region. | The region is invalid or IAM Identity Center cannot be enabled in this region. | Check whether the region is valid. |
| 400 | IIC.1276 | Service instance not found. | Instance not found. | Check whether the request parameter is correct. |
| 404 | IIC.1276 | Service instance not found. | Instance not found. | Check whether the instance exists. |
| 400 | IIC.1277 | Agency creation failed. | Failed to create the agency. | Check whether the request parameter is correct. |
| 500 | IIC.1278 | Agency deletion failed. | Failed to delete the agency. | Contact technical support. |
| 500 | IIC.1279 | Role query failed. | Failed to query the policy. | Contact technical support. |
| 500 | IIC.1280 | Agency query failed. | Failed to query the agency. | Contact technical support. |
| 404 | IIC.1281 | Role ID {roleId} not found. | Role ID {roleId} not found. | Check whether the role ID exists. |
| 409 | IIC.1282 | A conflict occurred during the service-linked agency creation. Try again later. | A conflict occurred during the service-linked agency creation. Try again later. | Check whether any conflicts occur during the service-linked agency creation and try again later. |
| 400 | IIC.1284 | Failed to process Organizations broadcast messages. | An error occurred when IAM Identity Center consumes Organizations events. | Check whether the request parameter is correct. |
| 403 | IIC.1284 | Failed to process Organizations broadcast messages. | An error occurred when IAM Identity Center consumes Organizations events. | Check whether permissions are sufficient. |
| 500 | IIC.1284 | Failed to process Organizations broadcast messages. | An error occurred when IAM Identity Center consumes Organizations events. | Contact technical support. |
| 400 | IIC.1285 | Custom role creation failed. | Failed to create the custom policy. | Check whether the custom policy is correct. |
| 400 | IIC.1286 | Custom role update failed. | Failed to update the custom policy. | Check whether the custom policy is correct. |
| 500 | IIC.1287 | Custom role deletion failed. | Failed to delete the custom policy. | Contact technical support. |
| 500 | IIC.1290 | Authorization association not found. | Authorization association not found. | Contact technical support. |
| 403 | IIC.1291 | The target account does not belong to the organization. | The target account does not belong to the organization. | Check whether the target account is in the organization. |
| 400 | IIC.1293 | Size limit exceeded. A policy content can contain a maximum number of 6,144 characters. | The size of the policy content exceeds the upper limit. | Check whether the policy content is too large. |
| 500 | IIC.1300 | Internal server error. | Internal service error. | Contact technical support. |
| 409 | IIC.1301 | Failed to create another identity source because an identity source has been configured for the service instance. | The instance already has an identity source connected. | Check whether the instance has an identity source connected. |
| 400 | IIC.1302 | Account not found. | No Organizations information found for the account. | Check whether the request parameter is correct. |
| 400 | IIC.1303 | Organizations not enabled. | Organizations not enabled. | Enable Organizations first. |
| 500 | IIC.1304 | Bad Request: {0}. | Organizations operation error. | Contact technical support. |
| 403 | IIC.1305 | This operation is available only for the organization's administrator. | Only the Organizations administrator has permission to perform this operation. | Log in as the Organizations administrator and try again. |
| 409 | IIC.1306 | The {0} is associated with an account. Disassociate the account and try again. | The principal is associated with an account. Disassociate the account and try again. | Disassociate the principal from the account and try again. |
| 404 | IIC.1307 | Principal not found or principal type not correct. | Principal not found or principal type not correct. | Check whether the principal exists and whether the principal type is correct. |
| 400 | IIC.1308 | Identity source not found. | Identity source not found. | Check whether the identity source ID is correct. |
| 404 | IIC.1308 | Identity source not found. | Identity source not found. | Check whether the identity source exists. |
| 500 | IIC.1309 | Failed to obtain the access token. | Failed to obtain the PKI token. | Contact technical support. |
| 400 | IIC.1310 | Duplicate username or email address. | Duplicate username or email address. | Try another username or email address. |
| 400 | IIC.1311 | The maximum number of allowed users has been reached. | The maximum number of users allowed in the identity source has been reached. | Check the user quota. If the quota does not meet your requirements, apply for a higher quota. |
| 404 | IIC.1312 | User not found. | User not found. | Check whether the user exists. |
| 404 | IIC.1313 | User extended attributes not found. | User extended attributes not found. | Check whether the user attributes are complete. |
| 400 | IIC.1314 | Invalid password. | The password complexity does not meet requirements. | Use a more complex password. |
| 400 | IIC.1315 | The password cannot be the same as the old password or one-time password. | The new password must be different from the old password and one-time password. | Enter another password. |
| 404 | IIC.1316 | Unique user ID not found. | Unique user ID not found. | Check whether the request parameter is correct. |
| 400 | IIC.1317 | User disabled. | Repeat disablement. | Check whether the object has already been disabled. |
| 400 | IIC.1318 | User enabled. | Repeat enablement. | Check whether the object has already been enabled. |
| 400 | IIC.1319 | Login credentials cannot be verified. Please try again. | Incorrect username or password. | Check whether the login credential is correct and try again. |
| 404 | IIC.1319 | We could not verify your sign-in credentials. Please try again. | Username or password not found. | Check whether the username or password exists. |
| 400 | IIC.1320 | User disabled. | User disabled. | Check whether the user is enabled. |
| 400 | IIC.1321 | Duplicate email. | Duplicate email address. | Try another email address. |
| 500 | IIC.1322 | Algorithm not found: {0}. | Algorithm not found. | Contact technical support. |
| 400 | IIC.1324 | The new password must be different from the username. | The new password must be different from the username. | Enter another password. |
| 400 | IIC.1325 | Invalid one-time password. | Invalid one-time password. | Check whether the one-time password is correct. |
| 500 | IIC.1326 | Internal server error: {0}. | Internal service error. | Contact technical support. |
| 400 | IIC.1327 | Invalid metadata. | Invalid SAML metadata. | Check whether the request parameter is correct. |
| 400 | IIC.1328 | IdP configuration already exists. | IdP configuration already exists and cannot be created again. | Check whether the IdP configuration already exists. |
| 400 | IIC.1329 | The IdP configuration status is incorrect. | The IdP configuration status is incorrect. | Check whether the IdP configuration status is correct. |
| 404 | IIC.1330 | IdP configuration not found. | IdP configuration not found. | Check whether the IdP configuration exists. |
| 400 | IIC.1331 | IdP tenant already exists. | IdP tenant already exists. | Check whether the IdP tenant already exists. |
| 404 | IIC.1332 | Tenant ID not found. | IdP tenant not found. | Check whether the IdP tenant exists. |
| 400 | IIC.1333 | Failed to delete the tenant because it is associated with a bearer token. | Failed to delete the provisioning tenant because it is associated with a token. | Delete the token first. |
| 404 | IIC.1334 | Bearer token ID not found. | Token not found. | Check whether the token exists. |
| 400 | IIC.1335 | The maximum number of allowed bearer tokens has been reached. | The maximum number of tokens has been reached. | Check the token quota. |
| 400 | IIC.1336 | Username verification failed. | Incorrect username. | Check whether the request parameter is correct. |
| 403 | IIC.1337 | No permission for action {0}. | No sufficient permissions. | Check whether you have permission to perform this operation. |
| 403 | IIC.1338 | Request parameter is required. | The parameter value cannot be empty. | Check whether the parameter is correct. |
| 403 | IIC.1339 | Service instance not found. | Parameter error. Service instance not found. | Check whether the parameter is correct. |
| 409 | IIC.1341 | Duplicate display name of the group. | The display name of the group already exists. | Try another display name. |
| 409 | IIC.1342 | Duplicate entity objects. | Failed to insert data into the database. | Check whether the data already exists. |
| 404 | IIC.1343 | Group not found. | Group not found. | Check whether the group exists. |
| 400 | IIC.1344 | The query condition must be an external ID or a unique attribute, and they cannot be specified at the same time. | Invalid alternative identifier. | Set the alternative identifier to external_id or unique_attribute. |
| 400 | IIC.1348 | The query condition must be an external ID or a unique attribute, and they cannot be specified at the same time. | Either external_id or unique_attribute is required. | Check whether the alternative identifier uses only one condition. |
| 404 | IIC.1349 | The attribute_path must be unique. | The path attribute must be unique. | Ensure that the path attribute is unique. |
| 400 | IIC.1351 | The maximum number of allowed groups has been reached. | The maximum number of groups allowed in the identity source has been reached. | Check the group quota. If the quota does not meet your requirements, apply for a higher quota. |
| 400 | IIC.1352 | The identity source does not belong to the account. | The identity source does not belong to the account. | Check whether the identity source belongs to the corresponding management account. |
| 400 | IIC.1353 | The display name of the group is required. | The display name of the user group cannot be empty. | Check whether the display name of the user group is valid. |
| 400 | IIC.1370 | The association between users and groups already exists. | The group membership already exists. | Check whether the user has been added to the group. |
| 404 | IIC.1371 | The association between users and group does not exist. | Membership identified by the ID not found. | Check whether the membership association ID is correct. |
| 400 | IIC.1372 | Group not found. | Group not found. | Check whether the group exists. |
| 404 | IIC.1372 | Group not found. | Group not found. | Check whether the group exists. |
| 400 | IIC.1373 | User not found. | User not found. | Check whether the user exists. |
| 404 | IIC.1373 | User not found. | User not found. | Check whether the user exists. |
| 404 | IIC.1374 | The association between users and group does not exist. | Group membership not found. | Check whether the user is added to the group. |
| 404 | IIC.1375 | Group member not found. | Member not found. | Check whether all requested members exist. |
| 400 | IIC.1380 | The start time cannot be later than the end time. | The start time must be earlier than the end time. | Ensure that the start time is earlier than the end time. |
| 500 | IIC.1381 | Request processing failed due to an unknown error, exception, or fault on the internal server. | Request processing failed due to an unknown error, exception, or fault on the internal server. | Contact technical support. |
| 409 | IIC.1382 | Failed to permanently delete database data fields. | Failed to permanently delete database data fields. | Check whether the data already exists. |
| 400 | IIC.1383 | The account has not applied for OBT. | Beta account ID required. | Use a beta account. |
| 400 | IIC.1384 | Account tag query failed. | An error occurred in account tag query. | Check whether the request parameter is correct. |
| 404 | IIC.1385 | HTTP request header not found. | HTTP request header not found. | Check whether the required HTTP request header is contained. |
| 400 | IIC.1386 | HTTP request header not found. | Invalid HTTP request header. | Check whether the HTTP request header is valid. |
| 400 | IIC.1387 | MFA device {0} not found. | MFA device not found. | Check whether the parameter is correct. |
| 400 | IIC.1388 | The maximum number of allowed MFA devices has been reached. | Failed to add MFA devices because the maximum number of MFA devices allowed for a user has been reached. | Check the MFA quota. |
| 400 | IIC.1389 | Incorrect format of the X-Request-Proof request header. | Incorrect authentication header pattern. | Check whether the authentication header pattern is correct. |
| 404 | IIC.1390 | HTTP request header {0} not found. | HTTP request header not found. | Check whether the HTTP request header exists. |
| 400 | IIC.1391 | Invalid X-Request-Proof request header. | Incorrect request proof. | Check whether the request header parameter is correct. |
| 400 | IIC.1392 | Failed to obtain the identity token. | Failed to obtain the STS credential. | Check whether the request parameter is correct. |
| 403 | IIC.1392 | Failed to obtain the identity token. | Failed to obtain the STS credential. | Check whether you have sufficient permissions. |
| 403 | IIC.1393 | The operation is not allowed because the account is frozen. | Account frozen. Operation not allowed. | Check whether the account is frozen. |
| 403 | IIC.1394 | The operation is not allowed because the account is restricted. | Account restricted. Operation not allowed. | Check whether the account is restricted. |
| 404 | IIC.1398 | Tenant not found. | Tenant not found. | Check whether the tenant exists. |
| 400 | IIC.1399 | Failed to obtain the bearer token. | Failed to obtain the bearer token. | Check whether the parameter is correct. |
| 400 | IIC.1400 | Bad Request: {0}. | Failed to create an access token. | Check whether the request parameter is correct. |
| 500 | IIC.1402 | Bad Request: {0}. | Failed to create an access token. | Contact technical support. |
| 400 | IIC.1404 | Access denied: {0}. | Access denied. | Check whether the request parameter is correct. |
| 403 | IIC.1404 | Access denied: {0}. | Access denied. | Check whether you have permission to perform this operation. |
| 400 | IIC.1405 | Bad Request: {0}. | Failed to verify the request parameter. | Check whether the request parameter is correct. |
| 500 | IIC.1405 | Bad Request: {0}. | Failed to verify the request parameter. | Contact technical support. |
| 404 | IIC.1406 | Application not found. | Application not found. | Check whether the application exists. |
| 400 | IIC.1407 | Failed to request the authorization of the account. | Profile not found. | Check whether the request parameter is correct. |
| 400 | IIC.1409 | Invalid token. | Invalid ID token. | Check whether the ID token is valid. |
| 401 | IIC.1410 | {0}. | Unauthorized. | Perform authorization as prompted. |
| 401 | IIC.1410 | Failed to verify the session because the token is not found. | Failed to verify the session because the token is not found. | Check whether the session has expired. |
| 400 | IIC.1411 | Client registration error. | An exception occurred when you register the client. | Check whether the request parameter is correct. |
| 500 | IIC.1411 | Client registration error. | An exception occurred when you register the client. | Contact technical support. |
| 500 | IIC.1412 | Algorithm not found: {0}. | Algorithm not found. | Check whether the algorithm is correct or contact technical support. |
| 400 | IIC.1413 | Invalid session state: {0}. | Invalid session state identifier. | Check whether the session status identifier is correct. |
| 400 | IIC.1414 | Redis error. | Redis operation error. | Check whether the request parameter is correct. |
| 400 | IIC.1415 | Failed to obtain the login token: {0}. | Failed to obtain the login token. | Check whether the request parameter is correct. |
| 500 | IIC.1415 | Failed to obtain the login token: {0}. | Failed to obtain the login token. | Contact technical support. |
| 500 | IIC.1416 | Internal server error: {0}. | Internal service error. | Contact technical support. |
| 404 | IIC.1417 | Identity source ID not found. | Identity source ID not found. | Check whether the identity source ID exists. |
| 400 | IIC.1418 | The workflow cannot be created. | Failed to create a workflow. | Check whether the parameter is correct. |
| 400 | IIC.1420 | An error occurred when activating the device authorization code. | An error occurred when activating the device authorization code. | Check whether the request parameter is correct. |
| 400 | IIC.1420 | An error occurred when canceling the device authorization code. | An error occurred when canceling the device authorization code. | Check whether the request parameter is correct. |
| 403 | IIC.1500 | Invalid Token. | Invalid access token. | Check whether the access token is valid. |
| 500 | IIC.1501 | Failed to obtain the identity token: {0}. | Failed to obtain the identity token. | Contact technical support. |
| 500 | IIC.1502 | Failed to list accounts for the user: {0}. | Failed to obtain the account list. | Contact technical support. |
| 500 | IIC.1503 | Failed to list agencies for the account: {0}. | Failed to list agencies or trust agencies for the account. | Contact technical support. |
| 500 | IIC.1504 | Token verification failed: {0}. | Failed to verify the access token. | Contact technical support. |
| 400 | IIC.1505 | Invalid parameter: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 500 | IIC.1506 | Algorithm not found. | Algorithm not found. | Check whether the algorithm is correct or contact technical support. |
| 400 | IIC.1507 | Failed to obtain the service instance information: {0}. | Failed to obtain the service instance information. | Check whether the request parameter is correct. |
| 500 | IIC.1507 | Failed to obtain the service instance information: {0}. | Failed to obtain the service instance information. | Contact technical support. |
| 400 | IIC.1508 | Failed to delete the MFA device: {0}. | Failed to delete the MFA device for the user. | Check whether the parameter is correct. |
| 500 | IIC.1508 | Failed to delete the MFA device: {0}. | Failed to delete the MFA device for the user. | Contact technical support. |
| 400 | IIC.1509 | Failed to create the workflow: {0}. | Failed to create a workflow. | Check whether the parameter is correct. |
| 500 | IIC.1509 | Failed to create the workflow: {0}. | Failed to create a workflow. | Contact technical support. |
| 400 | IIC.1511 | Failed to obtain the MFA settings: {0}. | Failed to obtain the MFA management settings of the user. | Check whether the parameter is correct. |
| 500 | IIC.1511 | Failed to obtain the MFA settings: {0}. | Failed to obtain the MFA management settings of the user. | Contact technical support. |
| 400 | IIC.1512 | Failed to list MFA devices for the user: {0}. | Failed to list MFA devices for the user. | Check whether the parameter is correct. |
| 500 | IIC.1512 | Failed to list MFA devices for the user: {0}. | Failed to list MFA devices for the user. | Contact technical support. |
| 500 | IIC.1513 | Request processing failed due to an unknown error, exception, or fault on the internal server. | Request processing failed due to an unknown error, exception, or fault on the internal server. | Contact technical support. |
| 400 | IIC.1514 | Failed to update the MFA device: {0}. | Failed to update MFA devices for the user. | Check whether the parameter is correct. |
| 500 | IIC.1514 | Failed to update the MFA device: {0}. | Failed to update MFA devices for the user. | Contact technical support. |
| 400 | IIC.1515 | Failed to obtain the permission set. | Failed to obtain the permission set. | Check whether the parameter is correct. |
| 500 | IIC.1515 | Failed to obtain the permission set. | Failed to obtain the permission set. | Contact technical support. |
| 400 | IIC.1516 | Email verification failed: {0}. | Email verification failed. | Check whether the parameter is correct. |
| 500 | IIC.1516 | Email verification failed: {0}. | Email verification failed. | Contact technical support. |
| 500 | IIC.1517 | Failed to get the PKI token. | Failed to obtain the PKI token. | Contact technical support. |
| 403 | IIC.1518 | Read permission does not support MFA registration. | Read permissions do not support MFA binding. | Check whether permissions are sufficient. |
| 403 | IIC.1519 | MFA disabled. | MFA disabled. | Enable MFA first. |
| 400 | IIC.1520 | Invalid access token. | Invalid access token. | Check whether the access token is valid. |
| 404 | IIC.1600 | Client not found. | Client not found. | Check whether the client ID is correct. |
| 403 | IIC.1601 | Client expired. | The client has expired. | Check whether the client has expired. If yes, add the client again. |
| 403 | IIC.1602 | Client secret expired. | The client secret key has expired. | Check whether the client secret key has expired. If yes, add the client again. |
| 500 | IIC.1603 | Internal server error: {0}. | Internal service error. | Contact technical support. |
| 401 | IIC.1604 | Invalid token. | Invalid access token. | Apply for a new access token and try again. |
| 500 | IIC.1605 | Algorithm not found: {0}. | Algorithm not found. | Contact technical support. |
| 400 | IIC.1606 | Invalid parameter: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 403 | IIC.1606 | Invalid parameter: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 404 | IIC.1606 | Invalid parameter: {0}. | Invalid request parameter. | Check whether the request parameter is correct. |
| 400 | IIC.1607 | Failed to verify the JWT signature: {0}. | JWT token signature verification error. | Check whether the JWT token is correct. |
| 400 | IIC.1608 | Authorization pending exception. | Authorization pending exception. | Try again later. |
| 400 | IIC.1609 | The client does not support {0}. | Client not supported. | Check whether the request is correct. |
| 500 | IIC.1610 | Internal server error. | Internal service error. | Contact technical support. |
| 500 | IIC.1611 | Failed to obtain the access token. | Failed to obtain the access token. | Contact technical support. |
| 401 | IIC.1612 | Invalid authorization type. | Invalid authorization type. | Check whether the authorization type is correct. |
| 404 | IIC.1613 | Authorization rejected. | Authorization rejected. | Check whether the user agrees to the authorization. |
| 400 | IIC.1615 | Requests of this type are not supported. | Request type not supported. | Check whether the request type is correct. |
| 400 | IIC.1616 | The workflow is not supported. | Workflow not supported. | Check whether the workflow steps are correct. |
| 400 | IIC.1617 | Failed to parse the ID token. | Failed to parse the ID token. | Check whether the ID token is valid. |
| 400 | IIC.1701 | User verification exception. | User verification error. | Check whether the request parameter is correct. |
| 500 | IIC.1701 | User verification exception. | User verification error. | Contact technical support. |
| 400 | IIC.1702 | Login authentication error. | Login authentication error. | Check whether the authorization code is valid. |
| 400 | IIC.1703 | Unsupported encoding. | Unsupported encoding. | Check whether the encoding of the request parameter is correct. |
| 400 | IIC.1704 | Approval code error. | Authorization code approval error. | Check whether the authorization code is valid. |
| 423 | IIC.1705 | User locked. | User locked or disabled. | Unlock or enable the user. |
| 424 | IIC.1706 | User expired. | The user password has expired. | Change the user password. |
| 400 | IIC.1707 | Incorrect username, password, or identity source ID. | Incorrect username, password, or identity source identifier. | Check whether the username, password, or identity source identifier is correct. |
| 400 | IIC.1708 | An error occurred when obtaining the external IdP. | Failed to obtain the identity provider information. | Check whether the request parameter is correct. |
| 400 | IIC.1709 | An error occurred when constructing the SAML request or response. | An error occurred when constructing the SAML request or response. | Check whether the request parameter is correct. |
| 400 | IIC.1710 | No supported methods. | Unsupported method. | Check whether the request parameter is correct. |
| 400 | IIC.1711 | An error occurred when obtaining SAML metadata. | Failed to obtain the SAML metadata. | Check whether the request parameter is correct. |
| 400 | IIC.1712 | The signature certificate cannot be decoded. | Failed to verify the signature certificate. | Check whether the certificate signature is successful. |
| 400 | IIC.1714 | Incorrect SAML response. | SAML response error. | Check whether the SAML response is correct. |
| 500 | IIC.1716 | Algorithm not found: {0}. | Algorithm not found. | Contact technical support. |
| 400 | IIC.1717 | Session expired. | Session expired. | Check whether the session is valid. |
| 400 | IIC.1718 | Failed to reset the password. | Failed to reset the password. | Check whether the request parameter is valid. |
| 400 | IIC.1719 | Username verification failed. | Username verification error. | Check whether the request parameter is correct. |
| 400 | IIC.1721 | Session timed out or stopped working. Restart your workflow. | Session timed out or stopped working. Restart your workflow. | Restart your workflow. |
| 400 | IIC.1722 | Request cannot be completed. Try again later. | Request cannot be completed. Try again later. | Try again later. |
| 400 | IIC.1724 | Failed to process the workflow. Try again later. | Failed to process the workflow. Try again later. | Try again later. |
| 400 | IIC.1725 | This operation cannot be performed. | This operation cannot be performed. | Check whether the request parameter is correct. |
| 400 | IIC.1726 | Failed to verify the MFA code. | Failed to verify the MFA code. | Check whether the request parameter is valid. |
| 400 | IIC.1727 | Failed to create an MFA device: {0} | Failed to create an MFA device. | Check whether the request parameter is correct. |
| 400 | IIC.1728 | Failed to update the MFA device: {0} | Failed to update the MFA device. | Check whether the request parameter is correct. |
| 400 | IIC.1728 | Failed to find the MFA device: {0} | Failed to find the MFA device. | Ensure that the device exists. |
| 400 | IIC.1729 | Devices of this type cannot be registered again. | Devices of this type cannot be registered again. | Check whether the number of registered MFA devices has reached the upper limit. |
| 400 | IIC.1730 | Failed to obtain the service instance information. | Failed to obtain the service instance information. | Check whether the request parameter is correct. |
| 400 | IIC.1731 | Invalid session state. | Invalid session state. | Check whether the session has expired. |
| 400 | IIC.1734 | User search failed. | Failed to retrieve users. | Check whether the request parameter is correct. |
| 400 | IIC.1735 | Incorrect username, password, verification code, or identity source ID. | Incorrect username, password, verification code, or identity source ID. | Check whether the username, password, verification code, or identity source ID is correct. |
| 400 | IIC.1736 | Workflow creation failed. Try again later. | Workflow creation failed. Try again later. | Try again later. |
| 400 | IIC.1737 | Incorrect username, password, verification code, or identity source ID. | Incorrect username, password, verification code, or identity source ID. | Check whether the username, password, verification code, or identity source ID is correct. |
| 500 | IIC.1738 | Failed to obtain the verification code. | Failed to obtain the verification code. | Contact technical support. |
| 403 | IIC.1739 | Login failed. Contact the administrator to add an MFA device. | Login failed. Contact the administrator to add an MFA device. | Contact the administrator to add an MFA device. |
| 400 | IIC.1740 | Invalid {0} | Invalid parameter. | Check whether the request parameter is valid. |
| 400 | IIC.1741 | Invalid one-time password. | Invalid one-time password. | Check whether the one-time password is valid. |
| 500 | IIC.1750 | Algorithm not found: {0} | Algorithm not found. | Contact technical support. |
| 400 | IIC.1751 | Failed to update the email status: {0} | Failed to update the email status. | Check whether the request parameter is correct. |
| HTTP Status Code | Response Status Code | Error Message | Description | Solution |
|---|---|---|---|---|
| 400 | 400 | Bad Request: {0} | Unsupported encoding. | Check whether the encoding of the request parameter is correct. |
| 404 | 404 | User [{0}] not found. | User not found. | Check whether the user exists. |
| 404 | 404 | Group [{0}] not found. | Group not found. | Check whether the group exists. |
| 404 | 404 | Group member not found. | Member not found. | Check whether the user exists and is added to the group. |
| 409 | 409 | User [{0}] or email address already exists. | User already exists. | Check whether the user already exists. |
| 409 | 409 | Group [{0}] already exists. | Group already exists. | Check whether the group already exists. |
| 500 | 500 | There was an internal server error. | Internal service error. | Contact technical support. |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.