diff --git a/internal/iam/repository_user.go b/internal/iam/repository_user.go
index d5d32cd44..392237bce 100644
--- a/internal/iam/repository_user.go
+++ b/internal/iam/repository_user.go
@@ -244,7 +244,7 @@ func (r *Repository) LookupUserWithLogin(ctx context.Context, accountId string,
 		return nil, errors.Wrap(err, op)
 	}
 	if !allowed {
-		return nil, errors.New(errors.RecordNotFound, op, fmt.Sprintf("user not found for account %s", accountId))
+		return nil, errors.New(errors.RecordNotFound, op, fmt.Sprintf("user not found for account %s and auth method is not primary for the scope so refusing to auto-create user", accountId))
 	}
 
 	metadata := oplog.Metadata{