rencore.com (opens in a new tab) Start a trial (opens in a new tab)
Reference

Client secret

Last updated Inventory Entra ID

AI summary

Rencore Governance tracks client secrets in your Entra ID, recording properties like expiration dates, start dates, key IDs, and risk scores. By default, the system scans daily, though you can configure weekly, bi-weekly, or monthly intervals instead.

All client secrets registered in Entra ID

Part of the Entra ID inventory.

In Rencore Governance

The Client secret inventory page in Rencore Governance: counts, trend, violated policies and the list of objects
The inventory page in a Rencore demo Environment, captured October 2026.

Scan settings

Default scanning interval Allowed scanning intervals Data removal during incremental scan
Default Daily, Weekly, Bi-Weekly, Monthly, Never, Initial Yes

Properties

Property Type Description Automation placeholder
Application Application registration Client secret for this application {{Clientsecret.Application}}
Application name String The display name for the application. {{Clientsecret.ApplicationName}}
Initially Scanned DateTime Shows when this object was initially found in a scan. {{Clientsecret.CreatedTime}}
Display Name String {{Clientsecret.DisplayName}}
End date DateTime The date and time at which the password expires represented using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. {{Clientsecret.EndDateTime}}
Key id String The unique identifier for the password. {{Clientsecret.KeyId}}
Last scan update DateTime Shows when this object was last updated in a scan. If an object is found during a scan but no property has been changed this date will not change. {{Clientsecret.LastModifiedTime}}
Risk Score Int32 Stores risk score {{Clientsecret.RiskScore}}
Risk Score Update DateTime Stores risk score update {{Clientsecret.RiskScoreLastUpdate}}
Risk Score Value String Stores risk score value like Low_Low {{Clientsecret.RiskScoreValue}}
Start date DateTime The date and time at which the password becomes valid. The Timestamp type represents date and time information using ISO 8601 format and is always in UTC time. For example, midnight UTC on Jan 1, 2014 is 2014-01-01T00:00:00Z. {{Clientsecret.StartDateTime}}

Relations

Relation Connector Description
Application registration Entra ID All Entra ID application registrations

Segments

This object does currently not have any segments.

Actions

This object does currently not have any actions.

Frequently asked questions

What is the client secret object in Rencore Governance?

All client secrets registered in Entra ID. Client secret is an object type in the Entra ID inventory of Rencore Governance.

Which properties does Rencore Governance collect for client secret?

Rencore Governance collects 11 properties for Client secret, such as Application, Application name, Initially Scanned and 8 more.

How often is client secret scanned?

You can change the scan interval of Client secret objects under Configure objects (daily, weekly, bi-weekly, monthly, never or initial (collected once)). The interval is a target, not a guarantee: a scan can run later than planned.

Which module includes the Entra ID connector?

The Entra ID connector is part of the Digital Workplace module of Rencore Governance, which every Plan includes. The connector is generally available.

Related pages

Related pages