OIDCNotEnrolledError

exception gafaelfawr.exceptions.OIDCNotEnrolledError(message, user=None, *, failed_at=None)

Bases: OIDCError

The user is not enrolled in the upstream OpenID Connect provider.

This is raised when the username claim is missing from the ID token, which is how CILogon indicates that no matching enrolled user record could be found in LDAP for the federated identity.

Parameters:

• message (str)

• user (str | None, default: None)

• failed_at (datetime | None, default: None)