Send the sign-in form of the shop with an e-mail address and a password, without expecting it to succeed: for the refused sign-in.
Examples
When I sign in to the shop with "customer@example.com" and "wrong-password"
When we sign in to the shop with "nobody@example.com" and "Whatever123456789!"
And I sign in to the shop with "customer@example.com" and "x"
When I sign in to the shop with "shopper@example.com" and "nope"
When sign in to the shop with "customer@example.com" and "wrong-password"
Pattern
When(/^(I |we )*sign in to the shop with "([^"]*)" and "([^"]*)"$/, …)
Part of @webship-js/prestashop-steps (github.com/webship/prestashop-steps), a step pack for Webship-js 2.0.x.