Error - Validate a user identify token

Hi everyone,

I have been working on an expansive Power Automate flow regarding updating constituent information, combining 2-3 flows together separately, that work together. It was working great, but it had been 2 weeks since I last tested it and I keep getting this error once the flow starts to speak to the RE NXT connections:

"Action 'Validate_a_user_identity_token' failed: The user identity token was missing or invalid, or the token has expired, or was issued to a different application or environment"

When I last tested it, this was not an issue at all. I confirmed with our ITS team that nothing got changed from an org admin back-end PoV, nor with our environments. Also, I checked the connectors in PA, they are all successfully connected with no issues.

The only thing I can think of is when I go to developer.blackbaud.com and go to developer account → my apps → view environments → under authorized it says no.

Although, I have no idea how to change it from no to yes, if this is even the issue?

Anyone else experience anything similar recently?

Thanks!
Luis Puesan

Answers

  • Hi @Luis Puesan tagging in @Erik Leaver for the specific question about your Developer account and how to change it from no to yes. Thanks!

  • Erik Leaver
    Erik Leaver Blackbaud Employee
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    @Luis Puesan

    Root cause #1 (most likely): SKY app is no longer authorized to the environment

    You mentioned this key detail:

    developer account → my apps → view environments → under authorized it says no

    That is not cosmetic and is very likely the actual cause.

    The Validate a user identity token action requires:

    • A valid SKY Application ID
    • That application to be authorized (approved) for the specific RENXT environment
    • The Power Automate connection to be authenticated to the same environment

    If Authorized = No, Blackbaud will reject the token, even if:

    • The Power Automate connection looks healthy
    • Nothing changed in Microsoft
    • Nothing changed in the environment settings

    Why it used to work

    Authorization can be lost if:

    • The app was never formally approved by an environment admin (common in test scenarios)
    • An admin reauthorized applications in RENXT
    • The app was cloned / updated / re-saved
    • The environment association was reset on Blackbaud’s side

    What should help

    An environment admin must:

    1. Go into RENXT
    2. Admin area → Applications (or SKY API applications)
    3. Locate the SKY app
    4. Explicitly authorize / approve it for the environment

    Once that flips to Authorized = Yes, the token validation step should immediately start working again.

    If not, we can explore some other potential causes.

  • Erik Leaver
    Erik Leaver Blackbaud Employee
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    If the above approach doesn't solve the issue, the next most likely scenario is what Alex posted in the other thread you commented in:

  • Thank you for the reply, Erik! Unfortunately, I do not see Applications nor SKY API Applications in the admin area in RE NXT, I clicked everywhere in the tabs up top once I was in. Going to have our ITS person submit a ticket on my behalf to see if we can figure it out, he doesn't see an authorize button either.

    Regarding Alex's suggestion, fortunately when I first started with Power Automate, I made two separate environments one for test and one for production, each pointing to the respective databases.

  • Erik Leaver
    Erik Leaver Blackbaud Employee
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    @Luis Puesan I said go to renxt but you should check the settings in the marketplace app permissions:

    Sign in to Blackbaud as a user with Marketplace Admin permissions.
    Open the Blackbaud Marketplace.
    Go to Manage
    Find the SKY app that’s no longer authorized (Power Platform or potentially an app that you are leveraging for an add in)
    Do one of the following:

    Reconnect / Reauthorize the app (if available), or
    Disconnect the app, then Connect it again.

    During the connect flow, approve the requested OAuth scopes when prompted.

  • @Erik Leaver

    Morning!

    Unfortunately, neither myself whose an admin and the ITS colleague who is an org admin see the reconnect / reauthorize when we find the app in the marketplace. The only option given to both of us is to disconnect. Also, I reconnected it and still the same issue!

  • Erik Leaver
    Erik Leaver Blackbaud Employee
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    @Luis Puesan hmm. let's let support dig in then. share the case number here.

    @Austen Brown You noted a similar issue last year in a different thread but I couldn't find your case number. If you can locate it (or remember how to resolve), we'd appreciate it!

  • @Erik Leaver here you go - thank you so much!

    020851568

  • @Erik Leaver seems both myself and the other ITS individuals are not admins in the marketplace, we are contacting the 1 sole admin in our whole organization for marketplace to see if she has the ability to authorize the app.

    I still wonder how did it get turned off over the past 2-3 weeks if she didn't turn it off? Could it have been that glitch that was occurring about a month ago?

  • Erik Leaver
    Erik Leaver Blackbaud Employee
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    @Luis Puesan wonder if the original authorizing user was disabled/had permissions changed?

  • Luis Puesan
    edited April 24

    The odd thing is though all I did was create the app → connected it and it was working completely fine. I never contacted anyone to approve my app etc. I just connected it to our RE NXT environment and it was working great

    The sole admin for marketplace (she is the super admin for all RE NXT) is still working here but at least we are heading hopefully in the right direction!

  • Austen Brown
    Austen Brown Community All-Star
    Tenth Anniversary Kudos 5 PowerUp Challenge: Product Update Briefing Feedback Task 3 bbcon 2025 Attendee Badge

    @Erik Leaver can you share a link to the thread? It'll help me jog my memory on how I solved this.

  • Our head admin (whose an admin in marketplace) checked and she only has the disconnect option within the marketplace for any apps.

Categories