The refresh token has expired due to inactivity.

(1) Share

Report

Posted on by Pat98110

We are running several Power Automate and see several failures

both SharePoint actions use a service account connection
there is no circumstance of that the flow being inactive for 90 days
the flow will work and then fail 10 minutes later and the work again. (It must be a routing issue within Microsoft)
cross checked the connections as well, all connections are in connected state

but, we are getting an issue with respect to the sharepoint and get items actions which throws an error intermitently

Error from token exchange: Runtime call was blocked because connection has error status: Enabled| Error, and sharepointonline is in the block list. Connection errors: [ParameterName: token, Error: Code: Unauthorized, Message: 'Failed to refresh access token for service: sharepointonlinecertificatev2. Correlation Id=6e162371-dd1d-4d16-a129-3f89d9b3e67f, UTC TimeStamp=4/18/2025 9:25:45 PM, Error: Failed to acquire token from AAD: {"error":"invalid_grant","error_description":"AADSTS700082: The refresh token has expired due to inactivity. The token was issued on 2024-10-02T22:05:03.0008892Z and was inactive for 90.00:00:00. Trace ID: be0f141e-366a-4618-8259-d5174eb72e00 Correlation ID: bff782b0-5fc7-437f-b43c-c9669330a442 Timestamp: 2025-04-18 21:25:45Z","error_codes":[700082],"timestamp":"2025-04-18 21:25:45Z","trace_id":"be0f141e-366a-4618-8259-d5174eb72e00","correlation_id":"bff782b0-5fc7-437f-b43c-c9669330a442","error_uri":"https://login.windows.net/error?code=700082"}']

IMPORTANT:

I have found that one ip address owned by Microsoft continue to create a failure that IP is 13.86.223.41 (See Attached)

Do a search on Tenant https://portal.azure.com/#view/Microsoft_AAD_UsersAndTenants/UserManagementMenuBlade/~/SignIns

Add filter

"IP address" contains 13.86.223.41
"Application" contains "App Service"

Categories:

Error handling

I have the same question (0)

All responses (4)

Answers (0)

Sort by

Suggested answer

pavanmanideep 574 Power Up Champ - 2025 on at

Like (0)

Report
Copy link

Link copied!
Hi There,

It looks like

The OAuth refresh token used to maintain the authenticated session for the SharePoint Online connector has expired due to 90 days of inactivity.

The token was issued on 2024-10-02 and expired after being inactive for 90 days.

As a result, the Power Platform cannot refresh or acquire a new access token, and thus your runtime connection call to SharePoint Online fails.

Fix:

Reauthenticate Sharepoint Online Connection.

Hope this helps...

Cheers,

PMDY

Microsoft Business Applications MVP

https://ecellorscrm.com

Was this reply helpful? Yes No
Pat98110 7 on at

Like (0)

Report
Copy link

Link copied!
That will make sense if the token continue to fail consistently. However, the data shows that another try is made and works and followed by failures. The common thread is when the traffic is routed to the ip address it fails to do the refresh token with Microsoft. Therefore, the routing is the issue on Microsoft side. We have several workflows that are intermittent failures.

Do a search on Tenant https://portal.azure.com/#view/Microsoft_AAD_UsersAndTenants/UserManagementMenuBlade/~/SignIns

Add filter

"IP address" contains 13.86.223.41

"Application" contains "App Service"

You are going to see failures. I see this on someone else Tenant and something. Failures for a refresh token.

Was this reply helpful? Yes No
Suggested answer

pavanmanideep 574 Power Up Champ - 2025 on at

Like (0)

Report
Copy link

Link copied!

Hi There,

I would suggest to raise a support ticket to Microsoft regarding this issue as this is more specific to your tenant and region.

Hope this helps...

Cheers,
PMDY
Microsoft Business Applications MVP
Subscribe to my blog: https://ecellorscrm.com

Was this reply helpful? Yes No
Pat98110 7 on at

Like (0)

Report
Copy link

Link copied!
I am trying. I have gone thru several engineers. I believe I need more data to raise this issue faster and further thru the process. Therefore, I am interested in getting more of the community to also investigate their tenant. I have looked at my colleagues' tenant in the Seattle Area and they see failures. Do you see such failures with ...

"IP address" contains 13.86.223.41

"Application" contains "App Service"

Was this reply helpful? Yes No