# Insufficient user authentication

The KeenAuth APIs return this problem type with HTTP status 401 (Unauthorized).

## Problem type

| Field | Value |
|---|---|
| Type URI | `https://docs.keenauth.com/errors/insufficient_user_authentication` |
| Code | `insufficient_user_authentication` |
| HTTP status | 401 Unauthorized |
| Title | Insufficient user authentication |

## Meaning

MFA or re-authentication within the last 300 seconds is required. The response carries `WWW-Authenticate: DPoP error="insufficient_user_authentication"` with `acr_values` or `max_age=300` (RFC 9470).

## Example response

Example response body. `detail` is a human-readable English description that is not meant for end users; `instance` identifies the request.

```json
{
  "type": "https://docs.keenauth.com/errors/insufficient_user_authentication",
  "title": "Insufficient user authentication",
  "status": 401,
  "code": "insufficient_user_authentication",
  "detail": "...",
  "instance": "urn:idp:request:<request_id>"
}
```

All error codes: [Error reference](/docs/errors).