forked-synapse/synapse/res/templates/sso_auth_bad_user.html

<html>
<head>
    <title>Authentication Failed</title>
</head>
    <body>
        <div>
            <p>
                We were unable to validate your <tt>{{server_name | e}}</tt> account via
                single-sign-on (SSO), because the SSO Identity Provider returned
                different details than when you logged in.
            </p>
            <p>
                Try the operation again, and ensure that you use the same details on
                the Identity Provider as when you log into your account.
            </p>
        </div>
    </body>
</html>
Give the user a better error when they present bad SSO creds If a user tries to do UI Auth via SSO, but uses the wrong account on the SSO IdP, try to give them a better error. Previously, the UIA would claim to be successful, but then the operation in question would simply fail with "auth fail". Instead, serve up an error page which explains the failure. 2021-01-12 13:19:42 -05:00			`<html>`
			`<head>`
			`<title>Authentication Failed</title>`
			`</head>`
			`<body>`
			`<div>`
			`<p>`
			`We were unable to validate your <tt>{{server_name \| e}}</tt> account via`
			`single-sign-on (SSO), because the SSO Identity Provider returned`
			`different details than when you logged in.`
			`</p>`
			`<p>`
			`Try the operation again, and ensure that you use the same details on`
			`the Identity Provider as when you log into your account.`
			`</p>`
			`</div>`
			`</body>`
			`</html>`