What causes UserErrorKeyNotFoundInKeyVault?

The secret name in the ADF linked service or parameter does not match the actual name in Key Vault (typo or wrong casing). The secret was deleted from Key Vault — either manually or via a lifecycle policy. The ADF factory is pointing to the wrong Key Vault (wrong vault URI in the linked service). The secret exists but a specific version was referenced and that version was disabled or expired

How do I fix UserErrorKeyNotFoundInKeyVault?

Open Azure Key Vault in the portal and confirm the exact secret name.. If the secret was deleted, recreate it with the same name and update all pipeline parameters that reference it.. Verify the Key Vault URI in the ADF linked service is correct (https:// .vault.azure.net/).. If referencing a specific secret version, verify the version ID is still active and not expired or disabled.. Use the ADF 'Test connection' button on the Key Vault linked service to confirm basic access.

High severitycredentials

Power BI Refresh Error:
UserErrorKeyNotFoundInKeyVault

What does this error mean?

An Azure Data Factory pipeline attempted to retrieve a secret or key from Azure Key Vault but the referenced secret does not exist.

Common causes

1The secret name in the ADF linked service or parameter does not match the actual name in Key Vault (typo or wrong casing)
2The secret was deleted from Key Vault — either manually or via a lifecycle policy
3The ADF factory is pointing to the wrong Key Vault (wrong vault URI in the linked service)
4The secret exists but a specific version was referenced and that version was disabled or expired

How to fix it

1Open Azure Key Vault in the portal and confirm the exact secret name.
2If the secret was deleted, recreate it with the same name and update all pipeline parameters that reference it.
3Verify the Key Vault URI in the ADF linked service is correct (https://<vault-name>.vault.azure.net/).
4If referencing a specific secret version, verify the version ID is still active and not expired or disabled.
5Use the ADF 'Test connection' button on the Key Vault linked service to confirm basic access.

Frequently asked questions

Does this error affect all pipeline runs?

Yes — once credentials expire or are revoked, every scheduled and manual pipeline run fails until updated.

How do I store credentials more securely in ADF?

Store secrets in Azure Key Vault and reference them in linked services — rotating a credential requires only updating the Key Vault secret.

Can I set up monitoring for credential expiry before pipelines fail?

For service principal secrets, set Azure Monitor alerts on Key Vault or App Registration expiry. For OAuth tokens, proactive rotation on a fixed schedule prevents failures.

Will re-entering credentials in the ADF linked service fix all pipelines that use it?

Yes — all pipelines using the same linked service succeed immediately after credentials are updated.

Official documentation: https://learn.microsoft.com/en-us/azure/data-factory/store-credentials-in-key-vault