I think that message is accurate and helpful. The user can then contact the a...

I think that message is accurate and helpful. The user can then contact the administrator to fix the issue.

I wouldn't suggest to make a check on isActive or any other conditions. Once it enters the outer if-block, we know that the user is there. Even if the user cannot login under any circumstances, there is no point to try to create the user again at all. If you check my patch in #2847914: Attempts to create an user even if it already exists, it ensures that we exit the method under all circumstances. That is, if the user is already present, we don't try to create it again.