How to handle non-login error from generic Oauth2 provider?

There is a change required on the SalesForce side, see - Help And Training Community