diff --git a/pkg/services/authn/authnimpl/service.go b/pkg/services/authn/authnimpl/service.go
index 4f3c5e0c2bf..2a2e165eac9 100644
--- a/pkg/services/authn/authnimpl/service.go
+++ b/pkg/services/authn/authnimpl/service.go
@@ -226,7 +226,12 @@ func (s *Service) authenticate(ctx context.Context, c authn.Client, r *authn.Req
 	r.OrgID = orgIDFromRequest(r)
 	identity, err := c.Authenticate(ctx, r)
 	if err != nil {
-		s.log.FromContext(ctx).Warn("Failed to authenticate request", "client", c.Name(), "error", err)
+		log := s.log.FromContext(ctx).Warn
+		if errors.Is(err, authn.ErrTokenNeedsRotation) {
+			log = s.log.FromContext(ctx).Debug
+		}
+
+		log("Failed to authenticate request", "client", c.Name(), "error", err)
 		return nil, err
 	}