Skip to content

Recovery Entry Unreachable

URI: https://docs.ankatech.co/errors/recovery-entry-unreachable
HTTP Status: 409 Conflict

When you see this

A platform recovery authority asked to perform an assisted recovery of an identity that holds no active membership. Nothing was changed.

An assisted recovery invalidates the identity's authenticators and hands over a single-use enrolment token. The person completes the recovery by enrolling a new authenticator and entering a tenant they belong to. An identity with no active membership has no tenant to enter, so its enrolment token could never be completed, and the recovery would leave the person unable to sign in anywhere.

Common Causes

  • The person has never activated their account. They were invited and their membership is still pending. A person who never activated has no authenticator to recover; their activation link is how they set one.
  • Every membership of the person is suspended. The person's tenants have suspended their memberships, so there is no tenant the recovery could let them enter.

Response Example

{
  "type": "https://docs.ankatech.co/errors/recovery-entry-unreachable",
  "title": "Recovery Entry Unreachable",
  "status": 409,
  "detail": "This identity holds no active membership, so a recovery could never be completed. Re-send its activation link, or reactivate one of its memberships first. Nothing was changed.",
  "instance": "/api/v3/admin/platform/identity-recoveries",
  "timestamp": 1765128600,
  "extensions": {
    "requestId": "3f1c2a9e-4b7d-4e2a-9c11-0a2b3c4d5e6f"
  }
}

Content-Type: application/problem+json — the response follows RFC 9457 Problem Details. The detail is one fixed sentence for every identity in this state.

How to Resolve

  1. If the person never activated, ask an administrator of their tenant to re-send the activation link. Activating the account lets the person set their first authenticator.
  2. If the person's memberships are suspended, ask an administrator of one of their tenants to reactivate the membership, then perform the recovery again.