High severityauthentication
Power BI Error:
AADSTS50139
What does this error mean?
The Microsoft Entra ID (Azure AD) session is invalid because the external (MSA) OAuth2 refresh token is missing.
Common causes
- 1Expired or revoked external Microsoft account (MSA) refresh token used in a federated/B2B sign-in
- 2Cross-tenant or guest (B2B) login where the home tenant session was terminated or reset
- 3Stale browser/Power BI Desktop token cache after a password change or MFA reset
- 4Conditional Access or session-lifetime policy that invalidated the existing session
- 5Hybrid Azure AD / synced identity whose external token slot was not refreshed during silent token acquisition
How to fix it
- 1Sign out completely from Power BI / portal.azure.com and close all browser windows; then sign back in to force a new external refresh token to be issued.
- 2In Power BI Desktop, go to File → Options and settings → Data source settings → Global permissions, remove the credentials for the affected source, and re-authenticate with 'Organizational account'.
- 3Clear the Windows Credential Manager entries starting with 'MicrosoftOffice16_Data:live.com' / 'msteams_adalsso' and the AAD token cache (%LOCALAPPDATA%\Microsoft\IdentityCache), then sign in again.
- 4For B2B/guest scenarios: have the user re-accept the invitation in their home tenant, or have an admin reset the guest's redemption status in Entra ID → External Identities.
- 5If it persists across users, ask your Entra ID admin to review Conditional Access session controls (sign-in frequency, persistent browser session) and any recent changes to federation/MSA settings.