diff --git a/internal/authtoken/authtoken_test.go b/internal/authtoken/authtoken_test.go
index 432c056a5..9a0736b98 100644
--- a/internal/authtoken/authtoken_test.go
+++ b/internal/authtoken/authtoken_test.go
@@ -130,13 +130,16 @@ func TestAuthToken_DbCreate(t *testing.T) {
 	ctx := context.Background()
 	conn, _ := db.TestSetup(t, "postgres")
 	rootWrapper := db.TestWrapper(t)
+	iamRepo := iam.TestRepo(t, conn, rootWrapper)
 	kms := kms.TestKms(t, conn, rootWrapper)
-	org, _ := iam.TestScopes(t, iam.TestRepo(t, conn, rootWrapper))
+	org, _ := iam.TestScopes(t, iamRepo)
 	wrapper, err := kms.GetWrapper(context.Background(), org.GetPublicId(), 1)
 	require.NoError(t, err)
+	user := iam.TestUser(t, iamRepo, org.GetPublicId())
 	am := password.TestAuthMethods(t, conn, org.GetPublicId(), 1)[0]
 	acct := password.TestAccount(t, conn, am.GetPublicId(), "name1")
 	createdAuthToken := TestAuthToken(t, conn, kms, org.GetPublicId())
+	iamRepo.AddUserAccounts(ctx, user.GetPublicId(), user.GetVersion(), []string{acct.GetPublicId()})
 
 	testAuthTokenId := func() string {
 		id, err := NewAuthTokenId(ctx)
diff --git a/internal/authtoken/repository_test.go b/internal/authtoken/repository_test.go
index fe08d6eff..bf15ee11d 100644
--- a/internal/authtoken/repository_test.go
+++ b/internal/authtoken/repository_test.go
@@ -890,7 +890,9 @@ func Test_CloseExpiredPendingTokens(t *testing.T) {
 	repo, err := NewRepository(ctx, rw, rw, kmsCache)
 	require.NoError(t, err)
 
-	org, _ := iam.TestScopes(t, iam.TestRepo(t, conn, rootWrapper))
+	iamRepo := iam.TestRepo(t, conn, rootWrapper)
+	org, _ := iam.TestScopes(t, iamRepo)
+	user := iam.TestUser(t, iamRepo, org.GetPublicId())
 	databaseWrapper, err := kmsCache.GetWrapper(ctx, org.PublicId, kms.KeyPurposeDatabase)
 	require.NoError(t, err)
 
@@ -900,6 +902,11 @@ func Test_CloseExpiredPendingTokens(t *testing.T) {
 
 		accts := password.TestMultipleAccounts(t, conn, authMethodId, cnt)
 		for i := 0; i < cnt; i++ {
+			user, _, err = iamRepo.LookupUser(ctx, user.GetPublicId())
+			require.NoError(t, err)
+
+			iamRepo.AddUserAccounts(ctx, user.GetPublicId(), user.GetVersion(), []string{accts[i].GetPublicId()})
+
 			at := allocAuthToken()
 			id, err := NewAuthTokenId(ctx)
 			require.NoError(t, err)