|
1 | 1 | --- |
2 | | -# Required metadata |
3 | | -# For more information, see https://review.learn.microsoft.com/en-us/help/platform/learn-editor-add-metadata?branch=main |
4 | | -# For valid values of ms.service, ms.prod, and ms.topic, see https://review.learn.microsoft.com/en-us/help/platform/metadata-taxonomies?branch=main |
5 | | - |
6 | 2 | title: Error code AADSTS50173 - The provided grant has expired due to it being revoked |
7 | 3 | description: Describes a problem and solution in which a user receives the error AADSTS50173 when trying to sign-in |
8 | | -author: custorod # GitHub alias |
| 4 | +author: custorod |
9 | 5 | ms.author: custorod |
10 | 6 | ms.service: entra-id |
11 | 7 | ms.topic: troubleshooting-problem-resolution |
12 | 8 | ms.date: 02/21/2025 |
13 | 9 | ms.subservice: authentication |
| 10 | +ms.custom: sap:Issues Signing In to Applications |
14 | 11 | --- |
15 | 12 |
|
16 | | -# Error code AADSTS50173 - The provided grant has expired due to it being revoked |
| 13 | +# AADSTS50173 - The provided grant has expired due to it being revoked |
17 | 14 |
|
18 | 15 | ## Symptoms |
19 | 16 |
|
20 | | -When attempting to authenticate with Microsoft Entra ID, you may encounter the following error message: |
| 17 | +When users try to sign in to an application that uses Microsoft Entra ID authentication, they receive the following error message: |
| 18 | + |
| 19 | + |
| 20 | +> `AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed. The user might have changed or reset their password. The grant was issued on '{authTime}' and the TokensValidFrom date (before which tokens are not valid) for this user is '{validDate}'.` |
21 | 21 |
|
22 | | -``` |
23 | | -AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed. The user might have changed or reset their password. The grant was issued on '{authTime}' and the TokensValidFrom date (before which tokens are not valid) for this user is '{validDate}'. |
24 | | -``` |
25 | 22 |
|
26 | 23 | ## Cause |
27 | 24 |
|
28 | | -This error occurs when the refresh token used for authentication has been revoked. This can happen due to several factors, including: |
| 25 | +This error occurs when the refresh token used for authentication has been revoked. This issue occurs if: |
29 | 26 |
|
30 | | -- The user has changed or reset their password. |
| 27 | +- The user changed or reset their password. |
31 | 28 | - The refresh token has expired. |
32 | 29 | - The refresh token has been revoked by an administrator. |
33 | 30 |
|
34 | | -For reference: |
35 | | -[Token Revocation in Microsoft Entra ID](/entra/identity-platform/refresh-tokens#token-revocation) |
36 | | -[Revoke user access in Microsoft Entra ID](/entra/identity/users/users-revoke-access) |
| 31 | +For more information, see: |
| 32 | + |
| 33 | +- [Token Revocation in Microsoft Entra ID](/entra/identity-platform/refresh-tokens#token-revocation) |
| 34 | +- [Revoke user access in Microsoft Entra ID](/entra/identity/users/users-revoke-access) |
37 | 35 |
|
38 | 36 |
|
39 | 37 | ## Resolution |
40 | 38 |
|
41 | 39 | To resolve this issue, follow these steps: |
42 | 40 |
|
43 | | -### Step 1: If you’re a user receiving this error |
44 | | - |
45 | | -On the application being used, try to locate an option to re-authenticate and/or clear any cached token information. This can also be achieved by signing out and signing back in to the application (when applicable/available). |
| 41 | +### For end users |
46 | 42 |
|
| 43 | +On the application being used, try to locate an option to re-authenticate and clear any cached token information. This can also be achieved by signing out and signing back in to the application (when applicable/available). |
47 | 44 |
|
48 | | -### Step 2: If you’re an application developer looking to address this error |
| 45 | +### For application developers |
49 | 46 |
|
50 | 47 | If the application is using [Microsoft Authentication Library (MSAL)](/entra/identity-platform/msal-overview), follow guidance regarding on how to [Handle errors and exceptions in MSAL](/entra/msal/dotnet/advanced/exceptions/msal-error-handling). |
51 | 48 |
|
|
0 commit comments