Add a state for user whose account wasn't created successfully
-
Create an agent that checks if the user account is successfully created. -
Use a different state (other then ok) if the account isn't created successfully. -
Create a new error page for the scenario above. -
Add a SSH group for this state to prevent SSH access.