AADSTS50173 🔷 Azure

AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed

The refresh token was revoked — usually because the user changed or reset their password, or an admin revoked sessions.

Seen on: Azure

Meaning

Cached tokens in tools (Azure CLI, VS, Teams, Outlook, PowerShell) stop working after a password change. Signing in again issues a fresh token.

Common causes

  • User changed/reset password
  • Admin revoked sessions
  • Token revoked by risk policy

⚡ Quick fix

  1. Sign out and sign in again (az logout / az login)
  2. Clear cached accounts in the tool
  3. For services, re-authenticate the stored credential

Detailed fix by platform

Azure CLI

  1. bash
    az logout
    az account clear
    az login

How to diagnose

  1. Event — Recent password change/revocation?
  2. Tool — Which client caches the token?

🔧 Still not fixed?

Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:

🧠 Still stuck? Analyze your error

Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.