The following table describes the SSO token-operation error codes.

Error Code Description
internal_error An internal error occurred while creating or signing a CLIENT-PRINCIPAL at user authentication time; no SSO token was produced.
expired_token The client-submitted token expired, and access to the web application was denied.
rejected_token The token value was rejected.
invalid_client The token request was issued from an invalid client type.
invalid_token The client-submitted SSO token failed validation, and access to the web application was denied.
corrupt_token The token submitted to an SSO token is corrupt (could not validate seal), and access to the web application was denied.
invalid_request The request containing information about the SSO token is incorrect or incomplete, and access to the web application was denied.
unsupported_token The request contains an unsupported token type, and access to the web application was denied.