AADSTS70008 means the refresh token expired or was revoked, so users are prompted again. Learn what resets tokens and how to control re-auth prompts.