Applications with expired client secrets
AI summary
Use Rencore Governance to detect Entra ID applications with expired client secrets, which either indicate the app has stopped working or represent unnecessary clutter. Check whether the application is still in use, add a new secret if it is, and delete the expired one.
What it detects
Shows Entra IDMicrosoft Entra IDMicrosoft Entra ID, formerly Azure Active Directory, is the Microsoft identity service behind every Microsoft 365 tenant.Read more applications with expired client secretsClient secretA client secret is a password-like string that an app registration uses to prove its identity when it requests a token from Microsoft Entra ID.Read more.
Why it matters
An application cannot sign in with a client secret that has expired. If the app still uses that secret, whatever depends on it has already stopped working. If not, the expired secret only makes it harder to see which credentials are in use. Check with the owner whether the app is still needed, add a new secret if it is, and delete the expired one.
The rule
Every Application registration that has any Client secrets where End date is more than 1 days ago
In Rencore Governance
Details
| Applies to | Application registration |
|---|---|
| Connector | Entra ID |
| Severity | High |
| Category | Operation |
| Recommended | No |
| Recommended automation | None |
| License type | Standard |
Related policies
Other policies that check Application registration objects:
Frequently asked questions
What does the applications with expired client secrets policy detect?
The Applications with expired client secrets policy shows Entra ID applications with expired client secrets.
Which objects does the applications with expired client secrets policy check?
The Applications with expired client secrets policy checks Application registration objects from the Entra ID inventory and reports each one that matches its rule as a violation.
How severe is a violation of the applications with expired client secrets policy?
Violations of the Applications with expired client secrets policy have High severity. The policy is in the Operation category.
Which module includes the applications with expired client secrets policy?
The Applications with expired client secrets policy comes with the Entra ID connector in the Digital Workplace module of Rencore Governance, which every Plan includes.
Was this page helpful?
Thanks for the feedback.
Thanks. What was wrong?