From 49265eee0f80bebedf121e9130f094c34f048071 Mon Sep 17 00:00:00 2001
From: Andy Dixon <andy@andydixon.com>
Date: Thu, 26 Feb 2026 12:05:06 +0000
Subject: [PATCH] docs: note invalid_grant on inactive subject state during
 token exchange

Extend SDK integration guidance to cover provider-side active-state enforcement at token issuance, where invalid_grant may be returned if client/user/project is inactive.
---
 docs/INTEGRATION_GUIDE.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/docs/INTEGRATION_GUIDE.md b/docs/INTEGRATION_GUIDE.md
index 6103c24..a0b42ee 100644
--- a/docs/INTEGRATION_GUIDE.md
+++ b/docs/INTEGRATION_GUIDE.md
@@ -135,6 +135,7 @@ try {
 ```
 
 `UserInfoException` with `invalid_token` can occur when provider-side subject scope is no longer active (for example user/project disabled) between token issuance and userinfo retrieval.
+`TokenExchangeException` with `invalid_grant` can also occur when provider-side client/user/project state is inactive at exchange time.
 
 ## Operational guidance