Specific message and error code for 2F failure
Currently, a user that enters an incorrect 2F code gets a generic "Invalid credentials message". In french, the message is "login or password incorrect" which is confusing because both of these are indeed correct.
I propose using a different portal error code for this situation, and letting organizations customize the 2F error message specifically. Such as "Your SuperSecureLogin