How to Customize Login Error Messages for LDAP Authentication in ServiceNow?

[Fabricio4]

Hy everyone,

I'm working on customizing the login experience in ServiceNow, specifically when users fail to authenticate via LDAP. By default, ServiceNow provides a generic error message like "Invalid username or password", but I need to display more specific messages based on the LDAP error codes.

For example:

• If the LDAP error code is 705, I want to display: "Your account is locked. Please contact support."

• For other errors like 49 (invalid credentials), I want to display: "Invalid username or password."

I understand that these error codes might be accessible in the session properties or logs, but I haven't found a clear way to dynamically capture them and map them to user-friendly messages in the UI.

Any suggestions?

[Kieran Anson]

I've not touched this myself, but my troubleshooting would lead me to look at the installation exits. A quick look shows there is a bit of logic to check LDAP connection, but not at the account level. 

You may need to ask HI to know if there are any global vars specified around the specific user-account Auth process 

[Fabricio4]

I've checked the login installation exit, but it doesn't seem like it's capturing the error code in any way. It is logging the error on the syslog table, but I wanted to treat the error before the log.