KNOWLEDGE BASE

Error "reauth related error (invalid_rapt)" Accessing Published BigQuery Workbooks Or Refreshing Extracts


Published: 02 Feb 2021
Last Modified Date: 08 Jul 2022

Issue

When accessing a published BigQuery workbook or refreshing extracts the following error occurs:

Confirm that you have provided valid credentials for this data source.
Unable to connect to data source with the supplied credentials, or no credentials provided.
Unable to authenticate using supplied user credentials.
{“error” : “invalid_grant”,
“error_description” : “reauth related error (invalid_rapt)”,
“error_subtype” : “rapt_required”}

Or 

Connectionless Failure (status code = 10000, Unable to connect to the data source with the supplied credentials, or no credentials provided.
Unable to authenticate using supplied user credentials.
{"InternalStatusCode":400,"message":"The provided grant or refresh token is invalid."}

Environment

  • Tableau Server
  • Tableau Cloud
  • Google BigQuery
  • Snowflake

Resolution

Use one of the below options to workaround the issue. 

Option 1 Delete and Re-Add Saved Credentials for all BigQuery Connections
  1. While you’re signed in to Tableau Server or Tableau Cloud, display your Account Settings page.
  2. Under Saved Credentials for Data Sources, select Delete for the username next to Google BigQuery. 
  3. Select Add and re-enter the BigQuery account credentials. 
Note: If you have published BigQuery connections that do not use saved credentials, see Edit Connections on Tableau Cloud for steps to update them. 
Note: Steps above for removing and re-adding the credentials refreshes the OAuth token validity period, and allows the refresh to begin succeeding again for all the specific data sources failing. Please also consult the data source vendor (Snowflake, Google BigQuery) to extend the timeout of the tokens to avoid this error.
For adjusting the token validity period, please see the documentation from your data source provider, or reach out to the support team specific to your data source type.

Option 2 Republish the Workbook or Data Source With Embedded Credentials in the Connection

Option 3 Add Tableau to the Exempt Trusted Apps List
See Beta: Set session length for Google Cloud services for information on adding Tableau to the trusted exempt list for the session length feature. 

Cause

Google implemented a session duration control for how long third-party applications can use a refresh token for refreshing an expired access token. 
Did this article resolve the issue?