Azure admins should be informed if client secret is about to expire for apps

Azure admins should be informed if client secret is about to expire for apps
4

Upvotes

Upvote

 Jun 14 2023
1 Comments (1 New)
New

When creating the microsoft add-in we have to set the client secret which is being used by our apps to provide contextual information in the add-in. This secret is set to expire at max every 24 months. Administrators are not informed when this expiry will happen. Once once the add-in stops working they get to know that it has expired. 

Solution - Alerts to be sent to azure admins to inform they of the client secret for any app or add-ins created. They should be able to configure these alerts based on the importance of the app or add-in

Comments
Brass Contributor

You can make use of the Azure portal for configure it with a maximum of 2 years expiry. Also, you can use the PowerShell cmdlet to configure the client secret expiry for more than 2 years. For more info refer: https://o365reports.com/2023/07/20/an-overview-of-client-secret-management-in-azure-ad/