IDP v3 Active Directory account state errors

[Ginger, Anthony]

In v2 we coded the error response from AD and a 'niceMsg' into the login page for the IDP, but in v3 it seems that this is now configured via adding some error states into password-authn-config.xml and authn-messages.properties.

I added the snippets into my IDP, reloaded and I see the correct error response from AD in the idp-process log when I set net.shibboleth.idp to TRACE but nothing changed on the login page, it still has ' The password you entered was incorrect' as the error message.

Am I missing a key step here, do I need to do more, the IDP is functionally working, it just returns the same error no matter what state the account is in.

Thanks