Connection expired – The connection token or API credentials expired during the flow execution

The “Connection Expired” error in Power Automate occurs when the connection token, OAuth authentication, or API credentials expire during flow execution.

Error Message:
"Connection expired – The connection token or API credentials expired during the flow execution."

This issue is common with services that use OAuth authentication (e.g., Microsoft 365, SharePoint, Dataverse, Google, Salesforce, etc.) and APIs that require periodic re-authentication.

---

2. Common Causes and Fixes

Cause	Description	Fix
Expired OAuth Token	The authentication token has expired and needs renewal.	Re-authenticate the connection in Power Automate.
Session Timeout	The session duration exceeded the allowed time.	Reconnect or extend the session duration in API settings.
Password or API Key Changed	The credentials stored in Power Automate are outdated.	Update the connection with the latest credentials.
Organization Security Policy	Conditional Access or MFA policies revoke authentication tokens.	Request an exemption for Power Automate in security policies.
Inactive Connection	Power Automate may disable connections after a long period of inactivity.	Reconnect the service in Power Automate settings.

---

3. Step-by-Step Troubleshooting Guide

Step 1: Re-authenticate the Expired Connection

If the authentication token has expired, reconnect the data source.

Steps to fix:

1. Open Power Automate.
2. Go to Data → Connections.
3. Find the connection with an error (it will likely show “Fix Connection”).
4. Click Fix Connection and log in again.
5. Save and test your flow.

Example Fix:

• If a SharePoint connection expires, log in with your Microsoft 365 credentials to refresh the token.

---

Step 2: Check if the API Key, Password, or Token Changed

If the data source uses an API key or password that was recently changed, Power Automate may still be using old credentials.

Steps to fix:

1. Confirm the latest API key or password with the service provider.
2. Open Power Automate and go to Connections.
3. Delete the old connection and create a new one with updated credentials.

Example Fix:

• If a Salesforce API key has changed, update Power Automate with the new key.

---

Step 3: Extend Token Expiration Time (If Possible)

Some platforms automatically expire tokens after a set time (e.g., 24 hours, 7 days). If possible, adjust settings to extend the token duration.

Steps to fix:

1. Check the token expiration policy in the data source.
2. If adjustable, extend the expiration period.
3. If not adjustable, set a recurring flow to re-authenticate before expiration.

Example Fix:

• In Azure AD, admins can increase OAuth token lifetimes using Conditional Access policies.

---

Step 4: Check Security Policies Blocking Reauthentication

Some organizations enforce security policies that revoke inactive sessions.

Steps to check:

1. Contact your IT Administrator.
2. Ask if Multi-Factor Authentication (MFA), Conditional Access, or DLP policies are causing token revocation.
3. Request an exemption or a service account that bypasses MFA.

Example Fix:

• If OAuth tokens expire every 24 hours, request an app-specific service account that does not require frequent re-authentication.

---

Step 5: Delete and Recreate the Connection

If fixing the connection does not work, delete and recreate it.

Steps to fix:

1. Open Power Automate.
2. Navigate to Data → Connections.
3. Delete the problematic connection.
4. Create a new connection and authenticate again.
5. Test the flow to confirm the fix.

Example Fix:

• If a Google Drive API connection fails, remove and re-add the connection with the correct credentials.