Azure Storage: Server failed to authenticate the request. Make sure the value of Authorization header is formed correctly including the signature (AuthenticationFailed)
The storage request’s signature or SAS token is invalid — wrong/rotated account key, expired SAS, or clock skew.
Server failed to authenticate the requestSignature did not matchSigned expiry time must be after signed start time Meaning
Shared Key and SAS signatures depend on the key, the exact request and the time. Rotated keys, SAS tokens outside their start/expiry window, mangled URL encoding, or a machine clock off by more than 15 minutes all fail.
Common causes
- Account key rotated/old connection string
- SAS expired or start time in the future
- SAS URL-encoding broken (+ or %2B)
- System clock skew
- Signed resource/permissions don’t match the operation
⚡ Quick fix
- Regenerate the connection string/SAS from current keys
- Set SAS start time a few minutes in the past
- Sync the system clock
Detailed fix by platform
Azure CLI
- bash
az storage account keys list -n stapp -g rg --query "[0].value" -o tsv az storage container generate-sas --account-name stapp -n data --permissions rl --expiry 2026-12-31T00:00Z --auth-mode login --as-user
How to diagnose
- Detail — AuthenticationErrorDetail text
- Times — SAS st/se vs current UTC
- Key — Which key was used?
🔧 Still not fixed?
Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:
Similar errors
Most viewed in Azure
- AADSTS50053 AADSTS50053: Your account is locked (Smart Lockout) / sign-in blocked due to suspicious activity
- MissingSubscriptionRegistration MissingSubscriptionRegistration: The subscription is not registered to use namespace 'Microsoft.X'
- AADSTS50173 AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed
Other ways to find it
Where this error sits
Origin: Platform & cloud. Errors that are often confused with or caused by this one (click to open):
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
💬 What worked for others
No tips yet — did something else fix this for you?
Share what worked for you
Tips are checked by an editor before they appear. Links are removed.
Report a correction or suggest an improvement
Last updated 15 Oct 2026