MTLS service error codes

The BlackBerry AtHoc MTLS service returns error codes in the form of a JSON file in the following format: 
{
      "errors" : [
          {
              "code" : "<error-code-1>",
              "field" : "<field-name>",
              "message" : <error-message>"
          },
          {
              "code" : "<error-code-2>",
              "field" : "<field-name>",
              "message" : "<error-message>"
           }
      ]
}

Error code

Handler

Error message

HTTP 403

IIS

The user certificate is invalid or unable to contact the Certificate Authority (CA.)

HTTP 401

IIS

The user certificate is expired or blacklisted.

HTTP 500

IIS

Other (internal server error.)

1020

Mobile MTLS Token Service

The request contains an invalid RedirectUri. The parameter exists in the query string and is not an empty value.

1030

Mobile MTLS Token Service

The request contains an invalid organization code.

2010

Mobile MTLS Token Service

MTLS authentication is not configured for the organization (based on the organization code and Client ID.

2020

Mobile MTLS Token Service

The primary regex (CAC/PIV) is not defined for the organization.

2030

Mobile MTLS Token Service

The mapping ID cannot be extracted from the certificate. The regex is invalid or the mapping ID is empty.

3010

Mobile MTLS Token Service

The user could not be found in BlackBerry AtHoc. The mapping ID is not set for the user.

3020

Mobile MTLS Token Service

The user is disabled or deleted in BlackBerry AtHoc.