E1308. Approval identity claim rejected mid-flight
Severity: ERROR. Class:
HITLIdentityClaimRejected(subclass ofPolicyDeniedError).
What happened
The user identity was valid when the approval request was created, but was revoked before the SDK resumed. Most commonly: the user was removed from the org during the wait.
Why it matters
The SDK re-resolves identity on every poll. A user no longer in the org can't have an approval honored on their behalf.
How to fix
Re-run with a current org member's identity. The original pending request is synthetically-denied with this code.
Catching this error
except PolicyDeniedError catches this.
See also
- Approval Workflow. The parent concept
- SDK: Approval callback. The
request_approval+waitAPI - Errors index