Skip Navigation

MTLS service error codes

The
BlackBerry AtHoc
MTLS service returns error codes in the form of a JSON file in the following format:
{ "errors" : [ { "code" : "<
error-code-1
>", "field" : "<
field-name
>", "message" : <
error-message
>" }, { "code" : "<
error-code-2
>", "field" : "<
field-name
>", "message" : "<
error-message
>" } ] }
Error code
Handler
Error message
HTTP 403
IIS
The user certificate is invalid or unable to contact the Certificate Authority (CA.)
HTTP 401
IIS
The user certificate is expired or blacklisted.
HTTP 500
IIS
Other (internal server error.)
1020
Mobile MTLS Token Service
The request contains an invalid RedirectUri. The parameter exists in the query string and is not an empty value.
1030
Mobile MTLS Token Service
The request contains an invalid organization code.
2010
Mobile MTLS Token Service
MTLS authentication is not configured for the organization (based on the organization code and Client ID.
2020
Mobile MTLS Token Service
The primary regex (CAC/PIV) is not defined for the organization.
2030
Mobile MTLS Token Service
The mapping ID cannot be extracted from the certificate. The regex is invalid or the mapping ID is empty.
3010
Mobile MTLS Token Service
The user could not be found in
BlackBerry AtHoc
. The mapping ID is not set for the user.
3020
Mobile MTLS Token Service
The user is disabled or deleted in
BlackBerry AtHoc
.