Search code examples
azureportalazure-app-registration

IS there a way to update expired client secret for Enterprise Application in Azure Portal


I have an application registered in the Azure Portal that has been converted into an Enterprise application. The client secret for this application has expired, and I need to update it. However, since it has become an Enterprise application, I'm unable to find the option to perform this action.

Question:

How can I update the expired client secret for an Enterprise application?


Solution

  • Note that: The app registration of the Microsoft Entra ID application resides in the tenant where the application is created.

    • Only the service principal instance of the application will be created in other tenants.

    I created a Microsoft Entra application in TenantA:

    enter image description here

    In another tenant when user sign-ins or creates service principal manually, the service principal of the application gets created:

    When searched in TenantB, with the application name I got the service principal same as you:

    enter image description here

    Hence to know which tenant the application multi-tenant application is registered; you can use the below command:

    Get-AzADServicePrincipal -ApplicationId "AppID" | ConvertTo-Json -Depth 5
    

    enter image description here

    • You can check AppOwnerOrganizationId which is the service principal app home tenant.

    To update the client secret, check the home tenant of the service principal and login to the home tenant and update.