AADSTS50173 Azure Origin: Platform & cloud Last updated 13 Oct 2026

AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed

The refresh token was revoked — usually because the user changed or reset their password, or an admin revoked sessions.

Exact message you may see The provided grant has expired due to it being revokeda fresh auth token is needed
Explore the map of this error Full error map →
Seen on: Azure

Meaning

Cached tokens in tools (Azure CLI, VS, Teams, Outlook, PowerShell) stop working after a password change. Signing in again issues a fresh token.

Common causes

  • User changed/reset password
  • Admin revoked sessions
  • Token revoked by risk policy

⚡ Quick fix

  1. Sign out and sign in again (az logout / az login)
  2. Clear cached accounts in the tool
  3. For services, re-authenticate the stored credential

Detailed fix by platform

Azure CLI

  1. bash
    az logout
az account clear
az login

How to diagnose

  1. Event — Recent password change/revocation?
  2. Tool — Which client caches the token?

🔧 Still not fixed?

Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:

Where this error sits

Origin: Platform & cloud. Errors that are often confused with or caused by this one (click to open):

401 — HTTP 401 Unauthorized (HTTP)401AADSTS500113 — AADSTS500113: No reply address is registered for the application (Azure)AADSTS500113AADSTS50020 — AADSTS50020: User account from identity provider does not exist in tenant and cannot access the application (Azure)AADSTS50020AADSTS50034 — AADSTS50034: The user account does not exist in the directory (Azure)AADSTS50034AADSTS50053 — AADSTS50053: Your account is locked (Smart Lockout) / sign-in blocked due to suspicious activity (Azure)AADSTS50053AADSTS50055 — AADSTS50055: The password is expired (Azure)AADSTS50055AADSTS700082 — AADSTS700082: The refresh token has expired due to inactivity (Azure)AADSTS700082invalid_token — invalid_token: The access token is invalid (JsonWebTokenError: invalid signature / jwt malformed) (Authentication)invalid_tokenAADSTS501…

Explore the map of this error Full error map →

🧠 Still stuck? Analyze your error

Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.

💬 What worked for others

No tips yet — did something else fix this for you?

Share what worked for you

Tips are checked by an editor before they appear. Links are removed.