This means that when your client entered their Multi-Factor Authentication code into our system, that information was incorrect.

the response sent by the user in return to an MFA request (1007) was incorrect. Your client should re-attempt that login again.