Altostratus
Altostratusso I interpreted your post as look at the session variables for a user after they put in an incorrect OTP response.
so I did a test, logged in with PW correct, then put in incorrect OTP response and then checked session variables. I see session.logon.page.errorcode as 1000 and session.otp.verify.last.errmsg as OTP_Mismatch.
I have been looking throughout the advanced customization code and cannot find any references to error code 1000. I also find no code relating to OTP_Mismatch.
I get the concept that you are mentioning here get the error, set it to something different via session variables and get a different result. My problem here is that how would one know what error codes relate to? If you go under basic customization, there are error codes and the text associated with them. The key thing is that the error codes are text and not number based, there is no visible column which relates the text to a number.
I'm guessing that this forum is protected by a F5 and that if you put in your PW wrong, you get one message, if you then put in your OTP wrong you get another message. So the results I am looking for have to be possible. Is there a way to talk with the person(s) who setup the logon policy to understand how they got around having different error messages for each use case?