ORA-25707: The Token Is Invalid (Doc ID 2959694.1)

Last updated on JULY 20, 2024

Applies to:

Symptoms

C:\Windows\system32>sqlplus /@<db alias>

SQL*Plus: Release 19.0.0.0.0 - Production on Wed Jun 21 11:37:36 2023
Version 19.18.0.0.0

Copyright (c) 1982, 2022, Oracle.  All rights reserved.

ERROR:
ORA-25707: The token is invalid.

Add EVENT_25701=15 based on trouble shooting per doc reference

https://docs.oracle.com/en/database/oracle/oracle-database/19/dbseg/authenticating-and-authorizing-microsoft-azure-active-directory-users-oracle-databases.html#GUID-F173F5A0-6B5F-4C9C-9D84-15DFF1A92FDD



Trace file shows as below

KPUZLN_TOKEN_CLIENT_TRC: OCI_ATTR_TOKEN_ISBEARER is not set to TRUE.

KPUZLN_TOKEN_CLIENT_TRC: Read OAUTH token Params.
Info = TOKEN_AUTH has the value of OAUTH.

KPUZLN_TOKEN_CLIENT_TRC: Read OAUTH token Params.
TOKEN_LOCATION specified: C:\Users\myToken

KPUZLN_TOKEN_CLIENT_TRC: OAUTH token is successfully read from file.

KZIAMC_CLIENT_TRC= Parse JWT failed                                        <===
reason = fail to locate header end when parsing for payload.           <===
KPUZLN_TOKEN_CLIENT_TRC: failed to set up token auth parameters!
reason = JWT token is invalid
KPUZLN_TOKEN_CLIENT_TRC: Authenticate internal failed
reason = Setting up for OAUTH token failed, or reading of connect string parameters or setting of signature, header and token failed for DBIAM.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.