Skip to content

az aks get-credentials fails with error AADSTS70043 - The refresh token has expired or is invalid due to sign-in frequency checks by conditional access #16209

@BenjaminHerbert

Description

@BenjaminHerbert

Describe the bug

Command Name
az aks get-credentials

Errors:

AADSTS70043: The refresh token has expired or is invalid due to sign-in frequency checks by conditional access. The token was issued on 2020-12-07T12:15:47.8520000Z and the maximum allowed lifetime for this request is 172800.
Trace ID: 9958a6aa-3e9b-4470-9df7-7d0603262301
Correlation ID: c215e3d3-39fa-42e5-855c-4d93e362d308
Timestamp: 2020-12-09 13:10:42Z

To Reproduce:

Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.

  • az aks get-credentials --resource-group {} --name {}

Expected Behavior

I expect that I get valid credentials. If not working, due to some expired token, I expect that I am asked to relogin and fetch a valid token. If not, at least some information what to do to resolve the error.

Environment Summary

Linux-5.9.11-100.fc32.x86_64-x86_64-with-glibc2.2.5
Python 3.8.6
Installer: RPM

azure-cli 2.16.0

Extensions:
azure-devops 0.18.0

Additional Context

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions