Blog Post

Core Infrastructure and Security Blog
11 MIN READ

Use Azure Logic Apps to Notify of Pending AAD Application Client Secrets and Certificate Expirations

Russ_Rimmerman's avatar
Russ_Rimmerman
Icon for Microsoft rankMicrosoft
Nov 29, 2021

Managing the expiration dates of client secrets and certificates for Azure Active Directory (AAD) applications can be challenging, especially for organizations with numerous applications. To address this, leveraging Azure Logic Apps offers an automated solution to proactively monitor and notify administrators and application owners of impending expirations. This approach enhances security and ensures uninterrupted application functionality by providing timely alerts for necessary credential updates.

Disclaimer The sample scripts are not supported under any Microsoft standard support program or service. The sample scripts are provided AS IS without warranty of any kind. Microsoft further disclai...
RussRimmerman_0-1638198579862.png
Updated Jan 29, 2025
Version 5.0
RussRimmerman
Phyxsius's avatar
Phyxsius
Copper Contributor
Mar 02, 2023

@Russ Rimmerman
Thank you for sharing this solution.

I managed to get it going per your instructions.

 

I do have a few questions that you probably can answer with no effort.

First one is more a request for conformation then a question.
It looks like this solution uses it's own App registration with Clientid, ClientSecret to operate and readout other App registration.

Correct?
Second, The Logic App takes in my case between 5 and 7 minutes to finish. It would be good to note in the instructions.

Unfortunately, the mail I receive has an empty table. The table headers are present it just does not have any content.

Do you have suggestions what the case could be?

There are plenty of App registrations with ClientSecret to fill the table.

The App Registration that the Logic App uses has the following permissions,  Application.Read.All, Application.ReadWrite.All and Directory.Read.All as type Application and have been granted consent.

 

Thanks in advance.