E1708. Approval identity claim rejected mid-flight

Severity: ERROR. Class: HITLIdentityClaimRejected (subclass of PolicyDeniedError).

What happened

The user identity was valid when the approval request was created, but was revoked before the SDK resumed. Most commonly: the user was removed from the org during the wait.

Why it matters

The SDK re-resolves identity on every poll. A user no longer in the org can't have an approval honored on their behalf.

How to fix

Re-run with a current org member's identity. The original pending request is synthetically-denied with this code.

Catching this error

except PolicyDeniedError catches this.

See also

• Approval Workflow. The parent concept
• SDK: Approval callback. The request_approval + wait API
• Errors index