Revoke-AzureADUserAllRefreshToken not working for one account

skip hofmann 46 Reputation points
2020-03-12T16:58:25.74+00:00

Hello

I can successfully run Revoke-AzureADUserAllRefreshToken -objectid <guid> for one particular account, and it works. However running the same command against a different account i get the below error. The account i am using to run the command is a global admin, and both target accounts are just regular accounts with no assigned roles

Revoke-AzureADUserAllRefreshToken : Error occurred while executing RevokeUserAllRefreshTokens
Code: Request_BadRequest
Message: An error occurred while processing the invalidating refresh tokens request.
RequestId: 17fece56-52ab-4a5f-9c51-353e425c2968
DateTimeStamp: Thu, 12 Mar 2020 16:57:34 GMT
HttpStatusCode: BadRequest
HttpStatusDescription: Bad Request
HttpResponseStatus: Completed
At line:1 char:1

  • Revoke-AzureADUserAllRefreshToken -ObjectId 79ba026c-1c52-4005-8292-c ...
  • ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  • CategoryInfo : NotSpecified: (:) [Revoke-AzureADUserAllRefreshToken], ApiException
  • FullyQualifiedErrorId : Microsoft.Open.AzureAD16.Client.ApiException,Microsoft.Open.AzureAD16.PowerShell.RevokeU
    serAllRefreshTokens
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,560 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vasil Michev 95,666 Reputation points MVP
    2020-03-12T17:45:25.22+00:00

    It's a very generic error, so not much we can decipher from it. Try repeating the operation via the O365 admin portal, or open a support case for proper troubleshooting.

    0 comments