What causes UserErrorOAuthTokenExpiredOrRevoked?

The OAuth refresh token expired after the configured maximum token lifetime (60–90 days). The OAuth token was revoked by an administrator (password change, account disable, or policy enforcement). The OAuth app registration's client secret expired and ADF cannot refresh the token. The user account used for OAuth authorization was disabled or its permissions were changed

How do I fix UserErrorOAuthTokenExpiredOrRevoked?

Re-authorize the linked service in ADF Studio: click 'Authorize' and complete the OAuth flow with valid credentials.. If using a service principal, verify the client secret has not expired and rotate it if necessary.. Verify the account used for authorization is still active and not disabled.. Use a service principal with a certificate rather than a client secret to avoid expiry issues.

High severitycredentials

Power BI Refresh Error:
UserErrorOAuthTokenExpiredOrRevoked

What does this error mean?

An ADF linked service using OAuth (e.g., Salesforce, REST, OData) failed because the access or refresh token has expired or was revoked.

Common causes

1The OAuth refresh token expired after the configured maximum token lifetime (60–90 days)
2The OAuth token was revoked by an administrator (password change, account disable, or policy enforcement)
3The OAuth app registration's client secret expired and ADF cannot refresh the token
4The user account used for OAuth authorization was disabled or its permissions were changed

How to fix it

1Re-authorize the linked service in ADF Studio: click 'Authorize' and complete the OAuth flow with valid credentials.
2If using a service principal, verify the client secret has not expired and rotate it if necessary.
3Verify the account used for authorization is still active and not disabled.
4Use a service principal with a certificate rather than a client secret to avoid expiry issues.

Frequently asked questions

Does this error affect all pipeline runs?

Yes — once credentials expire or are revoked, every scheduled and manual pipeline run fails until updated.

How do I store credentials more securely in ADF?

Store secrets in Azure Key Vault and reference them in linked services — rotating a credential requires only updating the Key Vault secret.

Can I set up monitoring for credential expiry before pipelines fail?

For service principal secrets, set Azure Monitor alerts on Key Vault or App Registration expiry. For OAuth tokens, proactive rotation on a fixed schedule prevents failures.

Will re-entering credentials in the ADF linked service fix all pipelines that use it?

Yes — all pipelines using the same linked service succeed immediately after credentials are updated.

Official documentation: https://learn.microsoft.com/en-us/azure/data-factory/connector-troubleshoot-rest