MetricSign
Start free
Low severityauthentication

Power BI Error:
AADSTS90007, Session ID can't be parsed

What does this error mean?

Microsoft Entra ID (Azure AD) rejected the sign-in because the session ID in the auth request is malformed or unreadable.

Common causes

  • 1Corrupted or truncated Entra ID session cookies (ESTSAUTH / ESTSAUTHPERSISTENT) in the browser
  • 2Stale auth state after a previous interrupted sign-in or a token cache that didn't clear cleanly
  • 3Client application sending a malformed or hand-crafted `session_id` query parameter in the /authorize request
  • 4Browser extensions, privacy tools or aggressive cookie strippers mangling the session cookie value
  • 5Cross-tenant or guest sign-in flow where the session was issued for a different authority than the one being called

How to fix it

  1. 1Sign out everywhere at https://login.microsoftonline.com, then close and reopen the browser to drop all ESTSAUTH cookies before retrying
  2. 2Retry the sign-in in a private/InCognito window with extensions disabled — this isolates whether a browser extension is corrupting the cookie
  3. 3If you control the client app, inspect the /authorize request and remove any custom `session_id` parameter; let Entra ID issue and manage it
  4. 4For Power BI Desktop / gateway scenarios: clear the MSAL token cache (`%LOCALAPPDATA%\Microsoft\Power BI Desktop\User\Cache` and `.IdentityService`) and sign in again
  5. 5If multiple users hit this on the same tenant, check Entra ID Sign-in logs for the correlation ID and open a Microsoft support case — repeated unparseable session IDs point to an app-side bug, not a user issue

Frequently asked questions

What does AADSTS90007 mean?

Bad request. The passed session ID can't be parsed.

How do I fix this error?

Check your application registration, token configuration, and user permissions in the Azure portal. Review Conditional Access policies if the error is policy-related.

Source · learn.microsoft.com/en-us/entra/identity-platform/reference-error-codes#aadsts-error-codes

Other authentication errors