The user has entered an invalid 2FA code, or the 2FA code has expired
The user has entered an invalid email/handle or password combination
The team has enabled 2FA but the user has not entered it yet