diff --git a/docs/INTEGRATION_GUIDE.md b/docs/INTEGRATION_GUIDE.md
index 158276b..fd78674 100644
--- a/docs/INTEGRATION_GUIDE.md
+++ b/docs/INTEGRATION_GUIDE.md
@@ -66,7 +66,7 @@ if (isset($_GET['error'])) {
     $error = (string) $_GET['error'];
     $description = isset($_GET['error_description']) ? (string) $_GET['error_description'] : 'Unknown provider error';
     // access_denied is a normal authorisation outcome (for example, membership
-    // revoked or user denied consent between request and submit).
+    // revoked, privilege changed, or user denied consent between request and submit).
     http_response_code($error === 'access_denied' ? 403 : 400);
     exit('Authorization failed: ' . $description);
 }