diff --git a/lib/private/User/Session.php b/lib/private/User/Session.php
index c33d79b83c..5e6501f904 100644
--- a/lib/private/User/Session.php
+++ b/lib/private/User/Session.php
@@ -599,6 +599,8 @@ class Session implements IUserSession, Emitter {
 
 					return true;
 				}
+				// If credentials were provided, they need to be valid, otherwise we do boom
+				throw new LoginException();
 			} catch (PasswordLoginForbiddenException $ex) {
 				// Nothing to do
 			}