Microsoft Entra ID
Microsoft Entra refresh token is not valid
AADSTS70000: InvalidGrant - The refresh token isn't valid.
Microsoft Entra ID rejected the token refresh request because the refresh token is no longer valid for the client or user context.
Observed message
AADSTS70000: InvalidGrant - The refresh token isn't valid.
Why it happens
- The refresh token has been revoked, invalidated, or is otherwise unusable.
- The token is being used in the wrong client or tenant context.
- A sign-in state change or security event invalidated the token.
How to fix it
- Prompt the user to sign in again and obtain a new token set.
- Check that the refresh token is being used by the correct application and tenant.
- Review account and session events that may have invalidated the token.
