| Name | Package | Description |
| AccessDeniedException | org.acegisecurity | Thrown if an Authentication object does not hold a required authority. |
| AccountExpiredException | org.acegisecurity | Thrown if an authentication request is rejected because the account has expired. |
| AcegiSecurityException | org.acegisecurity | Abstract superclass for all exceptions thrown in the security package and subpackages. |
| AuthenticationCredentialsNotFoundException | org.acegisecurity | Thrown if an authentication request is rejected because there is no Authentication object in the SecurityContext . |
| AuthenticationException | org.acegisecurity | Abstract superclass for all exceptions related an Authentication object being invalid for whatever
reason. |
| AuthenticationServiceException | org.acegisecurity | Thrown if an authentication request could not be processed due to a system problem. |
| AuthorizationServiceException | org.acegisecurity | Thrown if an authorization request could not be processed due to a system problem. |
| BadCredentialsException | org.acegisecurity | Thrown if an authentication request is rejected because the credentials are invalid. |
| ConcurrentLoginException | org.acegisecurity.concurrent | Thrown by ConcurrentSessionControllerImpl if an attempt is made to login and the user has already
exceeded their maxmimum allowed sessions. |
| CredentialsExpiredException | org.acegisecurity | Thrown if an authentication request is rejected because the account's credentials have expired. |
| DisabledException | org.acegisecurity | Thrown if an authentication request is rejected because the account is disabled. |
| InsufficientAuthenticationException | org.acegisecurity | Thrown if an authentication request is rejected because the credentials are not sufficiently trusted. |
| LdapDataAccessException | org.acegisecurity.ldap | Used to wrap unexpected NamingExceptions while accessing the LDAP server or for other LDAP-related data problems
such as data we can't handle. |
| LockedException | org.acegisecurity | Thrown if an authentication request is rejected because the account is locked. |
| NonceExpiredException | org.acegisecurity.ui.digestauth | Thrown if an authentication request is rejected because the digest nonce has expired. |
| ProviderNotFoundException | org.acegisecurity.providers | Thrown by ProviderManager if no AuthenticationProvider could be found that supports the
presented Authentication object. |
| ProxyUntrustedException | org.acegisecurity.providers.cas | Thrown if a CAS proxy ticket is presented from an untrusted proxy. |
| RemoteAuthenticationException | org.acegisecurity.providers.rcp | Thrown if a RemoteAuthenticationManager cannot validate the presented authentication request. |
| SessionAlreadyUsedException | org.acegisecurity.concurrent | Thrown by a SessionRegistry implementation if an attempt is made to create new session information
for an existing sessionId. |
| UsernameNotFoundException | org.acegisecurity.userdetails | Thrown if an UserDetailsService implementation cannot locate a User by its username. |