Blog Post

Core Infrastructure and Security Blog
11 MIN READ

Use Azure Logic Apps to Notify of Pending AAD Application Client Secrets and Certificate Expirations

Russ_Rimmerman's avatar
Russ_Rimmerman
Icon for Microsoft rankMicrosoft
Nov 29, 2021

Managing the expiration dates of client secrets and certificates for Azure Active Directory (AAD) applications can be challenging, especially for organizations with numerous applications. To address this, leveraging Azure Logic Apps offers an automated solution to proactively monitor and notify administrators and application owners of impending expirations. This approach enhances security and ensures uninterrupted application functionality by providing timely alerts for necessary credential updates.

Disclaimer The sample scripts are not supported under any Microsoft standard support program or service. The sample scripts are provided AS IS without warranty of any kind. Microsoft further disclai...
RussRimmerman_0-1638198579862.png
Updated Jan 29, 2025
Version 5.0
RussRimmerman
paulAZDania's avatar
paulAZDania
Copper Contributor
Aug 01, 2024

EPfaffinger  Thanks, for your reply anyway. As these things often happen, I wasn't given much time to celebrate before my boss said 'erm...this is really nice but can you make it so that the output sorts the result by those secrets that are expiring first? 🙄

 

So that's what I'm tying to do now..

 

NigelB18 asked the question on this forum and the OP Russ_Rimmerman responded....

 

yes that should be doable.  In general, I think I would try adding an $orderby= to the Initialize Nextlink variable step that stores the graph api query to order by the passwordCredentials/items/endDateTime and keyCredentials/items/endDateTime.

 

https://learn.microsoft.com/en-us/graph/query-parameters?tabs=http#odata-system-query-options

https://devblogs.microsoft.com/microsoft365dev/build-advanced-queries-with-count-filter-search-and-orderby/

however, me not being very skilled at code, I'm stuck here.

 

I've tried adding these lines to the initialize - NextLink step

like this: adding the &$orderby= passwordCredentials/items/endDateTime

https://graph.microsoft.com/v1.0/applications?$select=id,appId,displayName,passwordCredentials,keyCredentials&$top=999&$orderby= passwordCredentials/items/endDateTime

&$orderby=

It hasn't worked so far