The email and password don't match an account.
A one-time code didn't match.
The provider rejected fields; the reasons are in fieldErrors.
Too many failed attempts on the account.
Too many requests from here, not an account problem.
The step outlived its session, so sign-in starts again.
The provider has the action switched off, e.g. open sign-up.
The same email went out moments ago, so the provider held this one back.
The provider answered but couldn't send the email.
The login has no passkey to offer.
The passkey prompt was dismissed, or the provider rejected what it signed.
The prompt to create a passkey was closed or timed out.
The browser has no WebAuthn to create a passkey with.
This device holds a passkey for the login that the provider no longer lists.
The provider holds the password back until it is reset.
The address's workspace logs in with its own IdP, which the visitor is sent to.
A CFX staff address, where staff sign-in isn't set up: never tried as a member.
Why a step was refused, in the screens' terms rather than a provider's codes.