High severityauthentication
Power BI Error:
AADSTS90117, Invalid Request Input
What does this error mean?
The sign-in request to Microsoft Entra ID (Azure AD) is malformed: a required parameter is missing, empty, or has an invalid value.
Common causes
- 1Missing or empty required parameter (client_id, response_type, scope, or redirect_uri) in the authorization or token request
- 2Tenant identifier in the authority URL is invalid or contains stray characters (e.g. trailing slash, whitespace, wrong GUID/domain)
- 3redirect_uri is not URL-encoded properly or doesn't exactly match a Reply URL registered on the app in Entra ID
- 4Custom or third-party connector (Power BI gateway, ADF linked service, Databricks) sending a malformed OAuth body — wrong content-type or extra/duplicated parameters
- 5Manual edits to a connection string or auth payload introducing typos, smart quotes, or unsupported scope values
How to fix it
- 1Capture the full authorization URL or token POST body (browser DevTools Network tab, Fiddler, or ADF activity output) and identify which parameter is empty or malformed
- 2Verify the tenant segment of the authority — use either the tenant GUID or verified domain (e.g. https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/authorize), no trailing characters
- 3In the Entra ID portal → App registrations → your app → Authentication, confirm the redirect_uri sent matches a registered Reply URL exactly (scheme, host, path, casing)
- 4Ensure required parameters are present and non-empty: client_id, response_type, scope (with proper URL-encoded spaces as %20), and redirect_uri
- 5For Power BI / ADF / Fabric: re-create the data source credential or linked service rather than editing it manually — this regenerates a clean OAuth payload