What just happened
Ad platforms revoke OAuth sessions when the connecting user’s account is placed under a security check, when a permission changes, or when the user loses access to the underlying ad account. Adriel doesn’t cause these — the platform does — but they always look like a mass Adriel outage. The most common pattern by platform:Meta / Facebook — checkpoint on the connecting user
Meta / Facebook — checkpoint on the connecting user
Meta OAuth returns error code 190 / subcode 459 (
LOGIN_REQUIRED_FOLLOW_INSTRUCTIONS) when Facebook places the connecting user under a security check requiring one of:- A re-login
- Identity verification for a new device or location
- A 2FA event
- A password change
- Terms re-acceptance
- Renewed permissions
Microsoft Ads — user lost access or service principal missing
Microsoft Ads — user lost access or service principal missing
Microsoft Ads requires the OAuth user to have direct access to the Microsoft Advertising account itself.
Invalid client data SOAP faults occur when that user has lost access (typically because they left the company). The fix is to create a new OAuth connection with an account that has ad-account access; the existing data source can be relinked to the new connection.AADSTS650052 on a fresh connection attempt means the customer’s Microsoft Entra tenant is missing the service principal for the Microsoft Advertising API Service — the IT admin has to create it and grant admin consent to Adriel’s OAuth app.→ See the Microsoft Ads FAQs.Reddit — scopes changed
Reddit — scopes changed
Reddit disconnections with
EXTERNAL_SERVICE_PERMISSION_MISSING happen when the developer app or user permissions no longer match Reddit’s Business Manager and Ads API v3 requirements. Re-run OAuth while logged in as the correct user with all requested scopes (adsread, history, identity, adsconversions, adsedit, read), or delete and re-create the Reddit data source.→ See the Reddit Ads FAQs.Shopify — scopes changed to optional
Shopify — scopes changed to optional
Shopify OAuth scopes must be configured as required, not optional. Optional-scope tokens can lose permissions under some conditions, causing the connection to lose access. Move the scopes to the required section on the Shopify app side, delete the Adriel data source, and reconnect.→ See the Shopify FAQs.
Google Sheets — the linked sheet was deleted
Google Sheets — the linked sheet was deleted
Each Google Sheets asset is linked to a specific sheet (tab) inside the spreadsheet. If the sheet was deleted and recreated with the same name, the underlying reference no longer resolves and the connection reports as disconnected. Update the existing sheet rather than deleting and recreating it. Support can remap the asset to the new sheet.→ See the Google Sheets FAQs.
Meta — ad account or Page permission removed
Meta — ad account or Page permission removed
The Facebook OAuth connection can still be valid while individual ad accounts or Pages become invisible in Adriel because the connecting user has lost access to them in Meta Business Portfolio. Facebook Organic requires the connecting user to have proper access on the specific Page. Add users and permissions to the missing assets in Business Portfolio, then those accounts become connectable again in Adriel.
Workspace was set to cold
Workspace was set to cold
Not a platform-side event, but produces the same symptom. A workspace switched to
cold is skipped by data-collection workers and can be bulk-disconnected. Once the workspace is warmed back up, hourly and daily syncs resume and automatically backfill the gap.Reconnecting
- Identify which connecting user was authenticating the affected data sources — usually visible in each data source’s details panel.
- Complete any required prompts on the platform side (Meta checkpoint, Reddit re-auth, permission grant).
- Reconnect one data source in Adriel. If the reconnection succeeds, the same OAuth session applies to every data source under that user — they should reconnect too.
- If some data sources still fail, the OAuth user has lost access to those specific ad accounts. A new OAuth connection under a user with access is required.
Get notified next time
Set up a connection alarm on the affected data sources so a future disconnect is caught before it affects reporting. → See Alerts.Still stuck?
Contact support
Email
support@adriel.com with the connector name, the connecting user, the exact error text or code, and roughly when the disconnect happened.