cancel
Showing results for 
Search instead for 
Did you mean: 
Reply
AllanMartins
Advocate II
Advocate II

Flow Lifetime validation failed

Hi all, we have designed a flow, tested and it worked like a charm!

 

Basically, it works as an approval process, that forwards to the next agent upon approval, and so on. It does have from 3-5 approvals (depending of the case).

However, we are encountering some problems, some of the runs are reporting problems when the approver actually perform an action on it (when he hit either the Approve or Reject button at the message), it returns:

 

ActionFailed. An action failed. No dependent actions succeeded.
 
And just this week, when we had this new update on the Flow layout (where it shows a left-side menu with the error details), I was able to see the following:
 
{"Message":"Error from ASE:Bad key authorization token: Failed to validate token: IDX10223: Lifetime validation failed. The token is expired.\nValidTo: '05/30/2017 21:29:09'\nCurrent time: '05/30/2017 23:40:29'."}
 
So, when a token is generated (Response Approval Email, from Office 365 service) and one of the approvers takes a long time, does that token expire? Can we set a period for this token? Is there any workaround for this case?
 
thank you,
Allan
1 ACCEPTED SOLUTION

Accepted Solutions
TravisB
Power Automate
Power Automate

Hi @AllanMartins,

 

We are aware of this issue and are looking into a fix.

 

This happens on manually triggered flows. For security reasons we limit the period that the access token is live, and that's currently set to 1 hour. This period has been generally fine for most use cases until now, but new scenarios around approvals are broken by this.

 

In the next month or so, the limit is going to be raised to 7 days. This should help out the majority of cases trying to trigger approvals with manual triggers.

 

Thanks,

Travis

View solution in original post

48 REPLIES 48
TravisB
Power Automate
Power Automate

Hi @AllanMartins,

 

We are aware of this issue and are looking into a fix.

 

This happens on manually triggered flows. For security reasons we limit the period that the access token is live, and that's currently set to 1 hour. This period has been generally fine for most use cases until now, but new scenarios around approvals are broken by this.

 

In the next month or so, the limit is going to be raised to 7 days. This should help out the majority of cases trying to trigger approvals with manual triggers.

 

Thanks,

Travis

Hi @TravisB

 

Thanks for the reply on this. Looking forward to see this period extended. Will there be any announcement, or should I check in the next weeks?

 

We have a really good use for the Flow (in combination with others services) and this feature would be crucial to get it

to work.

 

Thanks!

Just marked your reply as the accepted solution! thanks

I can go ahead and bump this thread when the change is deployed.

 

This is a security change though and needs thorough vetting before release, so a fix is going to be several weeks out.

 

Thanks for reporting this issue!

 

Best,

Travis

I can go ahead and bump this thread when the change is deployed.

This is a security change though and needs thorough vetting before release, so a fix is going to be several weeks out.

Thanks for reporting this issue!

Best,
Travis

TravisB,

 

just to make sure I understand he issue; yesterday afternoon, I've created a button flow assigning an approval to a user.

This afternoon (so after 22 hours), the user approved the task; no lifetime validation error; does that mean the fix has been deployed ? 

Hi @sergeluca, quick question...

 

Have you done it using the Approvals service, or a O365-Approval Message?

 

I noticed that Approvals can manage it without major problems, but I see some cons with this service, in comparison with the O365 one:

- no support for Rich Text/HTML on the Body

- force the approval to be a "two-step" process (Approval respond on the message, then opens a page - where he is prompted to add a note - and then he submit his respond)

- cannot delegate an Approval

 

Approvals service is nice, but those 3 items is a problem for our use, so we decided to move with the O365 one for now.

 

regards, and thank you for adding a comment on this subject.

Allan

Hi Allan,

 

Thanks for the feedback. We are adding the ability to delegate approvals within the next month and adding support for rich-text/HTML is on our backlog also, slated for a little later in the year. Could you please elaborate on why the "two-step" process is problematic? We designed a two-step process so that approvers had an opportunity to make a comment on why they either approved or rejected a particular request. 

 

Thanks,

Merwan

Hi @sergeluca,

 

That is a good point!

 

It's complicated from the implementation side, but the long-short of it is that the approvals themselves will work, but after an hour attempting to call into any other connections will start to fail.

 

Also just got word on the fix - looks like one's ready and should be out globally by the end of next week.

 

Thanks,

Travis

Hey, just realized that I didnt phrase it properly... The two-step approvals has some benefits too!

 

But as more we go with it, there is always more need to make it more flexible, e.g: In our scenario, we would like to have the ability to "just" Approve (click once, and it's done - no need to "click again"), and to "Reject With comments" (so an approver would reject and write the reason why he is rejecting.

 

I think that a way to let the user/dev set this up for matching different scenarios, it would add (even more) value to the tool. Overall, the service is great!! It works fine, looking forward to see the new feats coming out. We are making a massive use of the Flow/PowerApps/Sharepoint combination and we have a great experience, other than the "token timeout" (which is forcing me to manually retrigger flows with expired tokens) I see endless ways to use it - and I can see way more to go with 🙂 .

Anonymous
Not applicable

Hi all,

 

Wondering if there's any official word of a fix being rolled out for this issue?

 

As of this afternoon we're still getting the same issue. A lot of people are starting to lose faith in Flow when they are forced re submit forms if their manager hasn't responded to it after an hour.

 

Cheers

Hi @Anonymous,

 

The fix should be available globally now.

 

Can you see if you're still seeing the issue? If so, we'll need to investigate.

 

Thanks,

Travis

Hi @TravisB

 

I just triggered some flow now, will wait few hours to check if the token for the response are now updated. I keep you posted.

 

I assume that we dont need to redesign the flow, or whatsover, correct?

 

thanks,

So, here is the result... it didnt work (at least for an existing Flow)...

 

Flow triggered at 19:54 UTC (or 16:54, GMT -3, which is my local time)

 

expired token.PNG

 

Do I have to redesign the flow?

Hi @AllanMartins,

 

No, I don't think recreating your flow will help. We are seeing the same thing on our side with old flows, at least.

 

I'm working with the folks who made the fix to see what's going on here. I'll update this thread with any news.

 

Thank you for letting us know about this!

 

Thanks,

Travis

Anonymous
Not applicable

Have just tested and the same issue seems to be persistent here. Error message same as @AllanMartins above.

 

Let me test if a new flow is affected the same way...

 

Edit:

 

Looks like new flows are being affected in the same manner. I created a new one this afternoon and waited 2 hours to respond to an approval prompt and received the same authentication error.

 

{"Message":"Error from ASE:Bad key authorization token: Failed to validate token: IDX10223: Lifetime validation failed. The token is expired.\nValidTo: '06/20/2017 03:03:12'\nCurrent time: '06/20/2017 04:18:54'."}

I also have big issues with this! Glad that it's currently being looked up asap.

 

EDIT; It failed sometime between 1 hr to 2 hr, clearly the update that prolongs the flow lifetime isn't working.

 

One of n numbers of objects; Fault msg

 

[quote]{"Message":"Error from ASE:Bad key authorization token: Failed to validate token: IDX10223: Lifetime validation failed. The token is expired.\nValidTo: '06/20/2017 07:57:52'\nCurrent time: '06/20/2017 08:02:52'."}[/quote]

I thought I would add more information about my case;

 

Flow;

SQL Server -> Common Data Service

 

2413 objects

 

1 hours nets me around 1200 - 1500 objects. So I need the flow going on between 2-3 hours to complete the flow.

There was a miscommunication - sorry for getting everyone's hopes up :x

 

The change to extend the lifetime of these tokens is actually rolling out with the current deployment and should be available globally by mid-next week.

 

We appreciate everyone's patience as the change rolls out in cadence with our safe-deployment standards

 

Thanks,

Travis

Helpful resources

Announcements

Super User of the Month | Drew Poggemann

As part of a new monthly feature in the Community, we are excited to share that Drew Poggemann is our featured Super User for the month of February 2024. If you've been in the Community for a while, we're sure Drew's name is familiar to you, as he is one of our most active contributors--he's been a Super User for five consecutive seasons!   Since authoring his first reply 5 years ago to his 514th solution authored, Drew has helped countless Community members with his insights and expertise. In addition to being a Super User, Drew is also a User Group leader and a Microsoft MVP. His contributions to our Super User sessions and to the new SUIT program are always welcome--as well as his sense of humor and fun-loving way of sharing what he knows with others.   When Drew is not solving problems and authoring solutions, he's busy overseeing the Solution Architecture team at HBS, specializing in application architecture and business solution strategy--something he's been doing for over 30 years. We are grateful for Drew and the amazing way he has used his talent and skills to help so many others in the Community. If you are part of the SUIT program, you got to hear some great tips from Drew at the first SUIT session--and we know he still has much more to share!You can find him in the Community and on LinkedIn. Thank you for all you do, Drew!

Announcing Power Apps Copilot Cookbook Gallery

We are excited to share that the all-new Copilot Cookbook Gallery for Power Apps is now available in the Power Apps Community, full of tips and tricks on how to best use Microsoft Copilot as you develop and create in Power Apps. The new Copilot Cookbook is your go-to resource when you need inspiration--or when you're stuck--and aren't sure how to best partner with Copilot while creating apps.   Whether you're looking for the best prompts or just want to know about responsible AI use, visit Copilot Cookbook for regular updates you can rely on--while also serving up some of your greatest tips and tricks for the Community. Our team will be reviewing posts using the new "Copilot Studio" label to ensure we highlight and amplify the most relevant and recent content, so you're assured of high-quality content every time you visit. If you share a post that gets featured in the curated gallery, you'll get a PM in the Community to let you know!The curated gallery is ready for you to experience now, so visit the new Copilot Cookbook for Power Apps today: Copilot Cookbook - Power Platform Community. We can't wait to see what you "cook" up!    

Celebrating a New Season of Super Users with Charles Lamanna, CVP Microsoft Business Applications

February 8 was the kickoff to the 2024 Season One Super User program for Power Platform Communities, and we are thrilled to welcome back so many returning Super Users--as well as so many brand new Super Users who started their journey last fall. Our Community Super Users are the true heroes, answering questions, providing solutions, filtering spam, and so much more. The impact they make on the Communities each day is significant, and we wanted to do something special to welcome them at our first kickoff meeting of the year.   Charles Lamanna, Microsoft CVP of Business Applications, has stressed frequently how valuable our Community is to the growth and potential of Power Platform, and we are honored to share this message from him to our 2024 Season One Super Users--as well as anyone who might be interested in joining this elite group of Community members.     If you want to know more about Super Users, check out these posts for more information today:    Power Apps: What is A Super User? - Power Platform CommunityPower Automate: What is A Super User? - Power Platform Community Copilot Studio: What is A Super User? - Power Platform Community Power Pages: What is A Super User? - Power Platform Community

Super Users 2024 Season One is Here!

   We are excited to announce the first season of our 2024 Super Users is here! Our kickoff to the new year welcomes many returning Super Users and several new faces, and it's always exciting to see the impact these incredible individuals will have on the Community in 2024! We are so grateful for the daily difference they make in the Community already and know they will keep staying engaged and excited for all that will happen this year.   How to Spot a Super User in the Community:Have you ever written a post or asked for help in the Community and had it answered by a user with the Super User icon next to their name? It means you have found the actual, real-life superheroes of the Power Platform Community! Super Users are our heroes because of the way they consistently make a difference in the Community. Our amazing Super Users help keep the Community a safe place by flagging spam and letting the Community Managers know about issues. They also make the Community a great place to find answers, because they are often the first to offer solutions and get clarity on questions. Finally, Super Users share valuable insights on ways to keep the Community growing, engaging, and looking ahead!We are honored to reveal the new badges for this season of Super Users! Congratulations to all the new and returning Super Users!     To better answer the question "What is a Super User?" please check out this article: Power Apps: What is A Super User? - Power Platform CommunityPower Automate: What is A Super User? - Power Platform Community Copilot Studio: What is A Super User? - Power Platform Community Power Pages: What is A Super User? - Power Platform Community

Did You Attend the Microsoft Power Platform Conference in 2022 or 2023? Claim Your Badge Today!

If you were one of the thousands of people who joined us at the first #MPPC Microsoft Power Platform Conference in 2022 in Orlando--or attended the second-annual conference in Las Vegas in 2023--we are excited to honor you with a special community badge! Show your support for #MPPC Microsoft Power Platform Conference this year by claiming your badge!           Just follow this link to claim your badge for attending #MPPC in 2022 and/or 2023: MPPCBadgeRequest    Want to earn your badge for 2024? Just keep watching our News & Announcements for the latest updates on #MPPC24.

Microsoft Power Platform | 2024 Release Wave 1 Plan

Check out the latest Microsoft Power Platform release plans for 2024!   We have a whole host of exciting new features to help you be more productive, enhance delegation, run automated testing, build responsive pages, and so much more.    Click the links below to see not only our forthcoming releases, but to also try out some of the new features that have recently been released to market across:     Power Apps  Power Automate  Copilot Studio   We can’t wait to share with you all the upcoming releases that will help take your Power Platform experience to the next level!    Check out the entire Release Wave: Power Platform Complete Release Planner 

Users online (2,680)