reset authentication refresh token revoked after 90 days due to inactivity

Question

reset authentication refresh token revoked after 90 days due to inactivity

BH Prem Kishore 0

How to remove or reset authentication refresh token that generated using az command is revoked after 90 days due to inactivity.
The following site is mentioned to contact your Microsoft or tenant administrator to change this value. Once the token is revoked, you get a message from the CLI saying you need to sign in again.

https://learn.microsoft.com/en-us/cli/azure/authenticate-azure-cli

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-08-16T05:19:22.75+00:00

Hi @BH Prem Kishore ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-08-16T05:19:22.75+00:00

Hi @BH Prem Kishore ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Shweta Mathur 30,296 Microsoft Employee Moderator

Hi @BH Prem Kishore ,

Thanks for reaching out.

When logging into the Azure CLI, the platform retains access and refresh tokens to activate the user session.

The access token's duration is generally short, typically lasting for one hour. In contrast, refresh tokens lifespan is 90 days in most scenarios, except for Single Page Applications, where they remain valid for 24 hours.

During this 90-day period, refresh tokens automatically renew themselves with a new token each time they are used, eliminating the need for logins to CLI interactively.

Starting from January 30, 2021, administrators no longer possess the ability to modify these token lifetimes. (Thanks for bringing this up, I will update the document for the same)

If your refresh token remains inactive for over 90 days and subsequently is revoked, the CLI will notify you, prompting you to re-initiate the sign-in process by entering the credentials again.

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

BH Prem Kishore 0 Reputation points

2023-08-14T08:16:03.9233333+00:00

Hi Shweta Mathur,

It's unable refresh token while relogin again using AZ CLI and giving me following message which I edited the subscription:
Failed to authenticate xxx 'Default Directory' due to error 'V2Error: invalid_grant AADSTS700082: The refresh token has expired due

to inactivity. The token was issued on 2023-04-17T05:40:54.9249642Z and was inactive for 90.00:00:00.
BH Prem Kishore 0 Reputation points

2023-08-14T08:17:40.01+00:00

Is there a way to clear token from my system.
Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-08-14T11:05:43.63+00:00

BH Prem Kishore

You can use the az account clear to remove all access tokens and refresh tokens from the CLI's local cache. Once you run this command, you will need to sign in again to generate new access and refresh tokens.

Share via

reset authentication refresh token revoked after 90 days due to inactivity

1 answer

Your answer