How to prevent Office 365 Groups connector certificate/token expiring in Power Automate

Like (1) Share

Report

Posted on 6 Jun 2025 13:23:42 by CU06061318-0

We're using a Power Automate flow with the Office 365 Groups connector and a service account whose password doesn’t expire. The flow runs several times a week and was working fine until we recently encountered this error:

Action 'List_group_members_-_Intranet_Team' failed: Error from token exchange: Bad Key authorization token. Token must be a valid JWT signed with HS256. Failed to validate token: IDX10249: X509SecurityKey validation failed. The associated certificate has expired. ValidTo (UTC): '5/6/2025 11:59:59 PM', Current time (UTC): '5/7/2025 1:26:43 AM'.

Why is the token or certificate expiring even though we're using a non-expiring service account? Is there a way to prevent this, or a recommended approach to rotate or refresh certificates for connectors like this?

Categories:

Business Process Flows

All responses (1)

Answers (0)

David_MA 11,531 Super User 2025 Season 1 on 23 Jun 2025 at 19:46:19

Like (0)

Report

How to prevent Office 365 Groups connector certificate/token expiring in Power Automate

You can wait for someone else to respond, but to my knowledge there is not a way to prevent a connection reference from timing out even when you are using a service account. Using service principals will also not completely remove the possibility that a connection reference will expire as you still need to monitor the expiration dates and renew the credentials before they expire. If there is a way to completely prevent this, we haven't figured it out where I work.