diff --git a/src/api/functions/entraId.ts b/src/api/functions/entraId.ts
index dd0d045f..7fc41774 100644
--- a/src/api/functions/entraId.ts
+++ b/src/api/functions/entraId.ts
@@ -108,7 +108,8 @@ export async function getEntraIdToken({
         redisClient: clients.redisClient,
         key: cacheKey,
         data: JSON.stringify({ token: result.accessToken }),
-        expiresIn: result.expiresOn.getTime() - new Date().getTime() - 3600,
+        expiresIn:
+          (result.expiresOn.getTime() - new Date().getTime()) / 1000 - 120, // get new token 2 min before expiry
         encryptionSecret,
       });
     }