MetricSign
Start free
Low severityauthentication

Power BI Error:
AADSTS50133

What does this error mean?

The single sign-on (SSO) artifact was revoked because the user's password expired or was recently changed.

Common causes

  • 1User's password expired according to the tenant's password policy
  • 2User (or admin) recently reset or changed the account password, invalidating existing SSO artifacts
  • 3Admin forced a sign-out / token revocation via Entra ID (Revoke sessions)
  • 4Risk-based Conditional Access triggered a credential reset (e.g. leaked credentials, risky sign-in)
  • 5Cached SSO cookie/refresh token in the browser or Power BI Desktop is stale after the password change

How to fix it

  1. 1Sign out of Power BI / the affected app completely and sign back in with the current password to issue a new SSO artifact
  2. 2In Power BI Desktop, go to File → Options and settings → Data source settings → Global permissions, clear the credentials for the data source, and re-authenticate
  3. 3Clear browser cookies for login.microsoftonline.com and *.powerbi.com (or use a fresh InPrivate/Incognito window) to drop the revoked SSO cookie
  4. 4If the password is expired, reset it at https://aka.ms/sspr or via your admin, then sign in again
  5. 5For service accounts used in scheduled refresh / gateway / ADF linked services: update the stored credential in the Power BI dataset, On-premises Data Gateway, or Azure Data Factory linked service after the password change — and consider switching to a service principal or managed identity to avoid recurrence

Frequently asked questions

What does AADSTS50133 mean?

The session isn't valid due to password expiration or recent pas

How do I fix this error?

Check your application registration, token configuration, and user permissions in the Azure portal. Review Conditional Access policies if the error is policy-related.

Source · learn.microsoft.com/en-us/entra/identity-platform/reference-error-codes#aadsts-error-codes

Other authentication errors