Error codes
invites.principal_email_unavailable
The accepting user's identity provider did not release an email claim, so the invite-email match check cannot run.
invites.principal_email_unavailable is returned at HTTP 403.
When this fires
Some SSO connections strip the email claim from the session token. Without an email the server cannot verify the invite-email match and fails closed.
What to do
Reconfigure your SSO connection to release the email claim, then re-attempt the invite. If you are not sure where to find that setting, your identity provider's admin console will have it.
See also
- SDK reference — the Python and TypeScript SDKs raise typed exceptions for codes in this namespace.
- Error code index — every code the runtime can return.