cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
Anonymous
Not applicable

Repeated error in the connector

Hello,

 

I have been having this repated error in my flow with this error message: 

 

Error from token exchange: Runtime call was blocked because connection has error status: Enabled| Error, and office365 is in the block list. Connection errors: [ParameterName: token, Error: Code: Unauthorized, Message: 'Failed to refresh access token for service: office365certificate.

Error: Failed to acquire token from AAD: AADSTS70002: Error validating credentials. AADSTS70008: The refresh token has expired due to inactivity. The token was issued on 2017-09-21T00:00:13.7564950Z and was inactive for 90.00:00:00. 

 

All my connections are connected. Can you suggest the next step I should take to resolve this error?

Thank you so much.

25 REPLIES 25
v-xida-msft
Community Support
Community Support

Hi @Anonymous,

 

Could you please share a screenshot of your issue?

 

The error message seems to tell that there is something wrong with the connections within your flow, the refresh token has expired due to inactivity within the connections of your flow. More details about the Refresh Token, please check the following article:

https://docs.microsoft.com/en-us/azure/active-directory/active-directory-configurable-token-lifetimes#refresh-tokens

 

I could not reproduce this issue on my side currently, please check if there is something wrong with the connections within your flow. Please also consider take a try to update the connection within your flow with the following article:

https://docs.microsoft.com/en-us/flow/add-manage-connections

 

In addition, you could also take a try to re-create a new connection to the connector within your flow and then try your flow again to check if the issue is solved. Also please clear cache of your browser and re-create your flow again to check if the issue is solved.

 

 

Best regards,

Kris

Community Support Team _ Kris Dai
If this post helps, then please consider Accept it as the solution to help the other members find it more quickly.
Anonymous
Not applicable

In the end, I still did not know why I got that error, as I have reauthenticated connections and even created similar new ones.

I have also contacted ms flow support person, but they can't figure out what's wrong.

 

So what I did is I created a copy of that error flow, connected the powerapps to that duplicated flow and somehow it works. 

Anonymous
Not applicable

Hi Kris,

 

That mean I need to constantly use the app, so the flow could work? And for how long can it be inactive before it expires?

spdevel
Advocate II
Advocate II

This error is occuring becuase you have MFA enabled on your tenant with a timeout sent on the token.  When the token expires, you will be required to re-authenticate any connections you have to O365.  If you setup a service account that does not have MFA enabled you can work around the issue until MS gets it fixed.  This is a known bug.

Anonymous
Not applicable

I work with An and can confirm that we have no MFA implemented on this tenant. The process intermitantly fails and then succeeds and then fails, etc. This is a serious issue with MSFlow and makes me very nervous using it. If I cannot rely on the system to send an email I now need to look at alternative solutions for this and not use MSFlow for emailing. I wonder what other parts of the system will intermitantly error? Is the a listing of all of the known bugs to help us decide whether Flow is the right tool for each use case where we need workflows?

I agree with @Anonymous can someone from MS please address this issue?

 

@KentWeareMSFT

Dean Gross

Office 365- MSCA
SharePoint - MCSE
Microsoft 365 Enterprise Administrator Expert
JonL
Power Participant
Power Participant

Hey There Mark!

 

Would you please email me at Jolevesq@Microsoft.com with this information, i would like to get you connected to our engineering support team.

 

Thanks!

Anonymous
Not applicable

Hello, we have the same error in our tenant. It happens sporadically for some users and consistently for others. 

Looking forward to updates on fixes for this error.

 

Thanks,

Silvana

Anonymous
Not applicable

Having the same problems. In the same way I'm not using MFA on the account.

Toasteroven
Advocate II
Advocate II

Same issue with me.

 

Works 9/10 times and then I get the error message on the 10th

 

Is there an ETA on the fix?

JesperSimonsen
Frequent Visitor

I am seen this too and I'm a little confused if I'm doing something wrong? 

I created an approval workflow in the pages library of a site for News, it works for me and a few other, but fails for others? 

 

How do I troubleshoot this and is there a workaround?

 

Error from token exchange: Runtime call was blocked because connection has error status: Enabled| Error, and sharepointonline is in the block list. Connection errors: [ParameterName: token, Error: Code: Unauthorized, Message: 'Failed to refresh access token for service: sharepointonlinecertificatev2. Correlation Id=88e5135c-4f18-43b2-8394-c2b13a373787, UTC TimeStamp=12/20/2018 2:47:13 PM, Error: Failed to acquire token from AAD: AADSTS70002: Error validating credentials. AADSTS70008: The refresh token has expired due to inactivity. The token was issued on 2018-06-22T07:21:57.7847063Z and was inactive for 90.00:00:00.
Trace ID: 8ac369a8-f423-4417-bce8-2ee78c073400
Correlation ID: 65dad1a2-d313-42fa-badf-3c7e4b00f766
Timestamp: 2018-12-20 14:47:13Z']

 

 

Got the same error

Anonymous
Not applicable

Hello - we found resolution for our scenario.

 

How we resolved:

  1.  User who is having issue: go to SharePoint online
  2.  Click on Flow > select the flow
  3. Click on edit connections located at very bottom of pop up
  4. We had a SharePoint and O365 connection and one of these had a red !.
  5. Clicked 3 ellipsis > clicked red ! and there was option to re-fresh connection

After following these steps, the user was able to run flows again.

 

For reference, this is the error msg we get: 
Error from token exchange: Runtime call was blocked because connection has error status: Enabled| Error, and sharepointonline is in the block list. Connection errors: [ParameterName: token, Error: Code: Unauthorized, Message: 'Failed to refresh access token for service: sharepointonlinecertificatev2. Correlation Id=906bc70d-67ee-469f-b09c-33dd8fcbf9fd, UTC TimeStamp=1/4/2019 5:11:27 PM, Error: Failed to acquire token from AAD: AADSTS70002: Error validating credentials. AADSTS70008: The refresh token has expired due to inactivity. The token was issued on 2018-09-19T19:17:43.3595038Z and was inactive for 90.00:00:00.
Trace ID: d5b7982a-78f5-44bc-b813-88c6cbe33000
Correlation ID: f01d5f24-1423-42fa-ae15-cff5355de9c8
Timestamp: 2019-01-04 17:11:27Z']

 

The error comes up consistently.

 

Hope this helps someone else!

 

Silvana


@Anonymous wrote:

Hello - we found resolution for our scenario.

 

How we resolved:

  1.  User who is having issue: go to SharePoint online
  2.  Click on Flow > select the flow
  3. Click on edit connections located at very bottom of pop up
  4. We had a SharePoint and O365 connection and one of these had a red !.
  5. Clicked 3 ellipsis > clicked red ! and there was option to re-fresh connection

After following these steps, the user was able to run flows again.

 

For reference, this is the error msg we get: 
Error from token exchange: Runtime call was blocked because connection has error status: Enabled| Error, and sharepointonline is in the block list. Connection errors: [ParameterName: token, Error: Code: Unauthorized, Message: 'Failed to refresh access token for service: sharepointonlinecertificatev2. Correlation Id=906bc70d-67ee-469f-b09c-33dd8fcbf9fd, UTC TimeStamp=1/4/2019 5:11:27 PM, Error: Failed to acquire token from AAD: AADSTS70002: Error validating credentials. AADSTS70008: The refresh token has expired due to inactivity. The token was issued on 2018-09-19T19:17:43.3595038Z and was inactive for 90.00:00:00.
Trace ID: d5b7982a-78f5-44bc-b813-88c6cbe33000
Correlation ID: f01d5f24-1423-42fa-ae15-cff5355de9c8
Timestamp: 2019-01-04 17:11:27Z']

 

The error comes up consistently.

 

Hope this helps someone else!

 

Silvana


We put in a support ticket with Microsoft due to this bug and were told it was by design and there was no way for the Flow to give any indication to the user that there's a broken (timed out) connection. The only guaranteed workaround is to add in a "run after" check on the first step in the Flow that uses the connection of that user - in our case the Get SharePoint Item step - to send them email if it fails with instructions to edit the connection and run it again. While it will do the job to let the user know I find it close to unacceptable that Microsoft's answer to the user having no idea the Flow failed being "by design." Seems that's the most common answer I get to clear bugs in their solutions. 

With this issue, I have to make updates to all our production Flows to add in that check into the first step(s) that use the user's connection and (obviously) add this into the design of future Flows.

Anonymous
Not applicable

The fun of adding in error handeling wheen there is no error! I would seriously recommend the use of other tools wehre you can get away with it as Flow is a broken product that looks like it will take a few years for the MS team to get working properly. To have connection tokens that no one knows anything about that only require a refresh to make work again seems a bit ammaturish to me. But hey I've only got 30 years experience in IT. And it is great when the flow is built to tell you something happened and then it fails to tell you. It makes us look so stupid to the user community. "What do you mean our critical incident flow failed and thus we failed a governance check just because it lost connection to soemthing that has had no change?" We have had a situation where a child care centre had to close for a day purely due to Flow token issues. So wherever possilbe use tools other than Flow if you want to know that the workflow you built functions all the time. Otherwise revert back to paper based processes.

mshoseini
Frequent Visitor

Hello,

 

In some cases, it is because of changing the flow admin account password. You should reconnect or refresh your connection in the Power Automate connections section.

I experienced this same problem see below with edits. Not what I expected from this product.

 

    "message": "Error from token exchange: Runtime call was blocked because connection has error status: Enabled| Error, and office365 is in the block list. Connection errors: [ParameterName: token, Error: Code: Unauthorized, Message: 'Failed to refresh access token for service: aadcertificate. Correlation Id="#ID", UTC TimeStamp=5/18/2020 6:20:16 AM, Error: Failed to acquire token from AAD: {\"error\":\"invalid_grant\",\"error_description\":\"AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed. The user might have changed or reset their password. The grant was issued on '2020-04-17T13:37:16.9808446Z' and the TokensValidFrom date (before which tokens are not valid) for this user is '2020-05-04T17:42:53.0000000Z'.\\r\\nTrace ID: "#ID" \\r\\nCorrelation ID: 96e24ee3-ff2a-45b3-8212-4e05388ae187\\r\\nTimestamp: 2020-05-18 06:20:15Z\",\"error_codes\":[50173],\"timestamp\":\"2020-05-18 06:20:15Z\",\"trace_id\":\"72b21403-ca45-48a7-98b0-f796f7a05400\",\"correlation_id\":\"'#ID'\",\"error_uri\":\"https://login.windows.net/error?code=50173\"}']"

 

DNS4ever
Frequent Visitor

Same issue, dedicated service account, no MFA for this account. Error like this and happens randomly:

 

{
"status": 401,
"source": "https://power-te-northeurope-1.azurewebsites.net:443/tokens/europe-001/office365/<guid>/exchange",
"message": "Error from token exchange: Runtime call was blocked because connection has error status: Enabled| Error, and office365 is in the block list. Connection errors: [ParameterName: token, Error: Code: Unauthorized, Message: 'Failed to refresh access token for service: aadcertificate. Correlation Id=<guid>, UTC TimeStamp=12/14/2020 3:26:20 PM, Error: Failed to acquire token from AAD: {\"error\":\"interaction_required\",\"error_description\":\"AADSTS50076: Due to a configuration change made by your administrator, or because you moved to a new location, you must use multi-factor authentication to access '<guid>'.\\r\\nTrace ID: <guid>\\r\\nCorrelation ID: <guid>\\r\\nTimestamp: 2020-12-14 15:26:20Z\",\"error_codes\":[50076],\"timestamp\":\"2020-12-14 15:26:20Z\",\"trace_id\":\"<guid>\",\"correlation_id\":\"<guid>\",\"error_uri\":\"https://login.windows.net/error?code=50076\",\"suberror\":\"basic_action\",\"claims\":\"{\\\"access_..."}']"
}

 

P.S.: Of course you need to log in after I press reply, then landing on the homepage, my message discarded. Happend 3x additional times. Fun part!

I wish I could have given you 1,000 thumbs up.

Helpful resources

Announcements

Exclusive LIVE Community Event: Power Apps Copilot Coffee Chat with Copilot Studio Product Team

It's time for the SECOND Power Apps Copilot Coffee Chat featuring the Copilot Studio product team, which will be held LIVE on April 3, 2024 at 9:30 AM Pacific Daylight Time (PDT).     This is an incredible opportunity to connect with members of the Copilot Studio product team and ask them anything about Copilot Studio. We'll share our special guests with you shortly--but we want to encourage to mark your calendars now because you will not want to miss the conversation.   This live event will give you the unique opportunity to learn more about Copilot Studio plans, where we’ll focus, and get insight into upcoming features. We’re looking forward to hearing from the community, so bring your questions!   TO GET ACCESS TO THIS EXCLUSIVE AMA: Kudo this post to reserve your spot! Reserve your spot now by kudoing this post.  Reservations will be prioritized on when your kudo for the post comes through, so don't wait! Click that "kudo button" today.   Invitations will be sent on April 2nd.Users posting Kudos after April 2nd at 9AM PDT may not receive an invitation but will be able to view the session online after conclusion of the event. Give your "kudo" today and mark your calendars for April 3, 2024 at 9:30 AM PDT and join us for an engaging and informative session!

Tuesday Tip: Unlocking Community Achievements and Earning Badges

TUESDAY TIPS are our way of communicating helpful things we've learned or shared that have helped members of the Community. Whether you're just getting started or you're a seasoned pro, Tuesday Tips will help you know where to go, what to look for, and navigate your way through the ever-growing--and ever-changing--world of the Power Platform Community! We cover basics about the Community, provide a few "insider tips" to make your experience even better, and share best practices gleaned from our most active community members and Super Users.   With so many new Community members joining us each week, we'll also review a few of our "best practices" so you know just "how" the Community works, so make sure to watch the News & Announcements each week for the latest and greatest Tuesday Tips!     THIS WEEK'S TIP: Unlocking Achievements and Earning BadgesAcross the Communities, you'll see badges on users profile that recognize and reward their engagement and contributions. These badges each signify a different achievement--and all of those achievements are available to any Community member! If you're a seasoned pro or just getting started, you too can earn badges for the great work you do. Check out some details on Community badges below--and find out more in the detailed link at the end of the article!       A Diverse Range of Badges to Collect The badges you can earn in the Community cover a wide array of activities, including: Kudos Received: Acknowledges the number of times a user’s post has been appreciated with a “Kudo.”Kudos Given: Highlights the user’s generosity in recognizing others’ contributions.Topics Created: Tracks the number of discussions initiated by a user.Solutions Provided: Celebrates the instances where a user’s response is marked as the correct solution.Reply: Counts the number of times a user has engaged with community discussions.Blog Contributor: Honors those who contribute valuable content and are invited to write for the community blog.       A Community Evolving Together Badges are not only a great way to recognize outstanding contributions of our amazing Community members--they are also a way to continue fostering a collaborative and supportive environment. As you continue to share your knowledge and assist each other these badges serve as a visual representation of your valuable contributions.   Find out more about badges in these Community Support pages in each Community: All About Community Badges - Power Apps CommunityAll About Community Badges - Power Automate CommunityAll About Community Badges - Copilot Studio CommunityAll About Community Badges - Power Pages Community

Tuesday Tips: Powering Up Your Community Profile

TUESDAY TIPS are our way of communicating helpful things we've learned or shared that have helped members of the Community. Whether you're just getting started or you're a seasoned pro, Tuesday Tips will help you know where to go, what to look for, and navigate your way through the ever-growing--and ever-changing--world of the Power Platform Community! We cover basics about the Community, provide a few "insider tips" to make your experience even better, and share best practices gleaned from our most active community members and Super Users.   With so many new Community members joining us each week, we'll also review a few of our "best practices" so you know just "how" the Community works, so make sure to watch the News & Announcements each week for the latest and greatest Tuesday Tips!   This Week's Tip: Power Up Your Profile!  🚀 It's where every Community member gets their start, and it's essential that you keep it updated! Your Community User Profile is how you're able to get messages, post solutions, ask questions--and as you rank up, it's where your badges will appear and how you'll be known when you start blogging in the Community Blog. Your Community User Profile is how the Community knows you--so it's essential that it works the way you need it to! From changing your username to updating contact information, this Knowledge Base Article is your best resource for powering up your profile.     Password Puzzles? No Problem! Find out how to sync your Azure AD password with your community account, ensuring a seamless sign-in. No separate passwords to remember! Job Jumps & Email Swaps Changed jobs? Got a new email? Fear not! You'll find out how to link your shiny new email to your existing community account, keeping your contributions and connections intact. Username Uncertainties Unraveled Picking the perfect username is crucial--and sometimes the original choice you signed up with doesn't fit as well as you may have thought. There's a quick way to request an update here--but remember, your username is your community identity, so choose wisely. "Need Admin Approval" Warning Window? If you see this error message while using the community, don't worry. A simple process will help you get where you need to go. If you still need assistance, find out how to contact your Community Support team. Whatever you're looking for, when it comes to your profile, the Community Account Support Knowledge Base article is your treasure trove of tips as you navigate the nuances of your Community Profile. It’s the ultimate resource for keeping your digital identity in tip-top shape while engaging with the Power Platform Community. So, dive in and power up your profile today!  💪🚀   Community Account Support | Power Apps Community Account Support | Power AutomateCommunity Account Support | Copilot Studio  Community Account Support | Power Pages

Super User of the Month | Chris Piasecki

In our 2nd installment of this new ongoing feature in the Community, we're thrilled to announce that Chris Piasecki is our Super User of the Month for March 2024. If you've been in the Community for a while, we're sure you've seen a comment or marked one of Chris' helpful tips as a solution--he's been a Super User for SEVEN consecutive seasons!   Since authoring his first reply in April 2020 to his most recent achievement organizing the Canadian Power Platform Summit this month, Chris has helped countless Community members with his insights and expertise. In addition to being a Super User, Chris is also a User Group leader, Microsoft MVP, and a featured speaker at the Microsoft Power Platform Conference. His contributions to the new SUIT program, along with his joyous personality and willingness to jump in and help so many members has made Chris a fixture in the Power Platform Community.   When Chris isn't authoring solutions or organizing events, he's actively leading Piasecki Consulting, specializing in solution architecture, integration, DevOps, and more--helping clients discover how to strategize and implement Microsoft's technology platforms. We are grateful for Chris' insightful help in the Community and look forward to even more amazing milestones as he continues to assist so many with his great tips, solutions--always with a smile and a great sense of humor.You can find Chris in the Community and on LinkedIn. Thanks for being such a SUPER user, Chris! 💪 🌠  

Tuesday Tips: Community Ranks and YOU

TUESDAY TIPS are our way of communicating helpful things we've learned or shared that have helped members of the Community. Whether you're just getting started or you're a seasoned pro, Tuesday Tips will help you know where to go, what to look for, and navigate your way through the ever-growing--and ever-changing--world of the Power Platform Community! We cover basics about the Community, provide a few "insider tips" to make your experience even better, and share best practices gleaned from our most active community members and Super Users.   With so many new Community members joining us each week, we'll also review a few of our "best practices" so you know just "how" the Community works, so make sure to watch the News & Announcements each week for the latest and greatest Tuesday Tips!This Week: Community Ranks--Moving from "Member" to "Community Champion"   Have you ever wondered how your fellow community members ascend the ranks within our community? What sets apart an Advocate from a Helper, or a Solution Sage from a Community Champion? In today’s #TuesdayTip, we’re unveiling the secrets and sharing tips to help YOU elevate your ranking—and why it matters to our vibrant communities. Community ranks serve as a window into a member’s role and activity. They celebrate your accomplishments and reveal whether someone has been actively contributing and assisting others. For instance, a Super User is someone who has been exceptionally helpful and engaged. Some ranks even come with special permissions, especially those related to community management. As you actively participate—whether by creating new topics, providing solutions, or earning kudos—your rank can climb. Each time you achieve a new rank, you’ll receive an email notification. Look out for the icon and rank name displayed next to your username—it’s a badge of honor! Fun fact: Your Community Engagement Team keeps an eye on these ranks, recognizing the most passionate and active community members. So shine brightly with valuable content, and you might just earn well-deserved recognition! Where can you see someone’s rank? When viewing a post, you’ll find a member’s rank to the left of their name.Click on a username to explore their profile, where their rank is prominently displayed. What about the ranks themselves? New members start as New Members, progressing to Regular Visitors, and then Frequent Visitors.Beyond that, we have a categorized system: Kudo Ranks: Earned through kudos (teal icons).Post Ranks: Based on your posts (purple icons).Solution Ranks: Reflecting your solutions (green icons).Combo Ranks: These orange icons combine kudos, solutions, and posts. The top ranks have unique names, making your journey even more exciting! So dive in, collect those kudos, share solutions, and let’s see how high you can rank!  🌟 🚀   Check out the Using the Community boards in each of the communities for more helpful information!  Power Apps, Power Automate, Copilot Studio & Power Pages

Find Out What Makes Super Users So Super

We know many of you visit the Power Platform Communities to ask questions and receive answers. But do you know that many of our best answers and solutions come from Community members who are super active, helping anyone who needs a little help getting unstuck with Business Applications products? We call these dedicated Community members Super Users because they are the real heroes in the Community, willing to jump in whenever they can to help! Maybe you've encountered them yourself and they've solved some of your biggest questions. Have you ever wondered, "Why?"We interviewed several of our Super Users to understand what drives them to help in the Community--and discover the difference it has made in their lives as well! Take a look in our gallery today: What Motivates a Super User? - Power Platform Community (microsoft.com)

Users online (4,767)