Low severityauthentication
Power BI Error:
AADSTS90012
What does this error mean?
The authentication request to Microsoft Entra ID (Azure AD) exceeded the server-side timeout before completing.
Common causes
- 1Slow or unreachable federated identity provider (ADFS, third-party SAML/WS-Fed STS) responding too slowly to Entra ID
- 2Network latency, packet loss, or proxy/firewall inspection delaying the auth round-trip to login.microsoftonline.com
- 3User abandoned or stalled the interactive sign-in flow (MFA prompt, conditional access challenge) past the timeout
- 4Service principal / managed identity token request blocked by an outbound proxy without the correct Entra ID endpoints whitelisted
- 5Transient Entra ID service degradation or throttling under load
How to fix it
- 1Retry the authentication once — AADSTS90012 is frequently transient and resolves on a second attempt.
- 2If you use ADFS or a third-party federated IdP, check its health, response times and event logs around the failure timestamp; Entra ID is waiting on it.
- 3Verify outbound network path from the client (Power BI Gateway, ADF Integration Runtime, Databricks driver) to login.microsoftonline.com and login.windows.net — check proxy, firewall and TLS-inspection rules per Microsoft's required-endpoints list.
- 4For service principal / gateway scenarios, confirm the token endpoint is reachable and that no proxy is breaking the TLS handshake; test with a manual token request (curl/Invoke-RestMethod) to isolate.
- 5Check the Microsoft 365 / Entra ID Service Health dashboard for an active incident before opening a support ticket with the correlation ID from the error.