Teams Provision Task Fails with Error AADSTS50173 (4256742)

The task log shows the following error when attempting to provision Teams:

Request failed with BadRequest status code (Bad Request).
{"correlationId":"xxxxxxxxxxxxxxxxxxx","statusCode":400,"message":"Failed to refresh access token. StatusCode: 400. ErrorCode: invalid_grant. AADSTS50173: The provided grant has expired due to it being revoked, a fresh auth token is needed. The user might have changed or reset their password. The grant was issued on '2021-06-10T19:10:15.8359578Z' and the TokensValidFrom date (before which tokens are not valid) for this user is '2021-11-09T19:44:00.0000000Z'. Trace ID: xxxxxxxxxxx Correlation ID: xxxxxxxxxxxxxx Timestamp: 2021-11-19 17:08:48Z"}

The error occurs because the OAuth consent grant has expired or been revoked. This typically happens when:

• The migration service account password was changed or reset.
• Tokens became invalid after a security update or policy change.
• The original consent was removed or expired.

• Regrant Consents for both the source tenant and target tenant:

  • In On Demand Migration, go to Choose Tenants from the menu.
  • Under Edit Consents, click Regrant Consents (or Grant Consents if not previously granted).
  • Enter the username and password for the migration service account for both source and target tenants.

• After regranting consents, rerun the Teams provision task.