{"id":280,"date":"2026-07-30T13:00:41","date_gmt":"2026-07-30T07:00:41","guid":{"rendered":"https:\/\/bytegeeks.net\/blog\/?p=280"},"modified":"2026-08-03T16:28:25","modified_gmt":"2026-08-03T10:28:25","slug":"fix-office-365-sign-in-loop-on-windows-aad-identity-cache-reset","status":"publish","type":"post","link":"https:\/\/bytegeeks.net\/blog\/fix-office-365-sign-in-loop-on-windows-aad-identity-cache-reset\/","title":{"rendered":"Fix Office 365 Sign-In Loop on Windows (AAD Identity Cache Reset)"},"content":{"rendered":"\n

If a user can log into their Windows profile just fine, but Office apps (Outlook, Teams, Word) keep bouncing them back to a sign-in prompt in an endless loop – never actually completing authentication – you’re likely dealing with a corrupted Azure AD Broker Plugin or Identity Cache on that machine. This is a common issue on domain-joined and Azure AD-joined workstations, and it’s usually fixable in a few minutes without a full profile rebuild.<\/p>\n\n\n\n

Why this happens<\/h2>\n\n\n\n

Windows caches Azure AD authentication tokens locally so users aren’t re-prompted constantly. When that cache – specifically the AAD Broker Plugin data or the Identity Cache folder – becomes corrupted or falls out of sync with the actual account state in Azure AD, Windows keeps trying to validate against stale, broken tokens. The result is Office repeatedly prompting for sign-in without ever resolving it, even with correct credentials.<\/p>\n\n\n\n

Fix: Reset the AAD Broker and Identity Cache<\/h2>\n\n\n\n

Before you start:<\/strong> sign out of the affected user’s Windows profile and sign in with an admin account, since you’ll need admin permissions to access their AppData folders.<\/p>\n\n\n\n

    \n
  1. Go to C:\\Users<\/code>, select the affected user’s folder. Windows will prompt for admin permission \u2014 accept it and wait for the folder to load.<\/li>\n\n\n\n
  2. Enable View hidden items<\/strong> (View tab in File Explorer) so you can see the AppData<\/code> folder.<\/li>\n\n\n\n
  3. Navigate to AppData\\Local\\Packages<\/code> (i.e. %LocalAppData%\\Packages<\/code>) and locate the folder starting with Microsoft.AAD.BrokerPlugin_<\/code>. Either rename it or delete the contents inside.<\/li>\n\n\n\n
  4. Go to AppData\\Local\\Microsoft\\IdentityCache<\/code>. Rename the numbered subfolder inside (e.g. if it’s named 1<\/code>, rename it to 1-old<\/code>).<\/li>\n\n\n\n
  5. Go to AppData\\Local\\Microsoft\\Office\\Licenses<\/code> and rename the numbered subfolder there the same way (e.g. 5<\/code> \u2192 5-old<\/code>) to clear the Office-specific identity cache.<\/li>\n\n\n\n
  6. Reboot the machine.<\/li>\n\n\n\n
  7. Log back in with the user’s own account<\/strong> (not the admin account).<\/li>\n\n\n\n
  8. Go to Settings > Accounts > Access work or school<\/strong>, click Add account<\/strong>, and re-add the user’s Office 365 account.<\/li>\n<\/ol>\n\n\n\n

    Office should now authenticate normally without looping. If it doesn’t resolve immediately, a second reboot after step 8 usually clears any remaining cached prompt state.<\/p>\n\n\n\n

    Notes<\/h2>\n\n\n\n