# Change a Client Secret for the Azure App for SharePoint Online

You must change your client secret for the Azure App for SharePoint Online every 90 days as a best practice.

Important

This procedure is partly completed on the Microsoft Entra admin center. The application is subject to change without notice. Consult the Microsoft documentation, for example, see What is the Microsoft Entra admin center?.

## Change Client Secret for the Azure App on Microsoft Entra Admin Center

1. Log on to the Microsoft Entra admin center.

2. In the navigation pane, go to App registrations.

   The App registrations page appears.

3. Select the SharePoint Online app from the list of applications displayed.

   You can also use the Search box to find the app.

   The Overview page of the app appears.

4. From the left pane, select Certificates & secrets.

5. Above Description, click New client secret.

   The Add a client secret screen appears.

6. Provide the required details and then click Add.

   - Description: Provide a descriptive name for your client secret.

   - Expires: Select 90 days (3 months) from the dropdown.

   Copy and paste the client secret Value in a secure location that you can access later.

7. From the list of client secrets, delete the old secret using the Delete button.

   As a best practice, delete all old client secrets.

## Update Client Secret for the Azure App for SharePoint Online in the Command Center

1. From the Command Center navigation pane, go to Protect > Microsoft 365.

   The Microsoft 365 Overview page appears.

2. In the Apps tab, click the app.

   The Overview page of the app appears.

3. In the Configuration tab, under the SharePoint connection settings section, click the action button on the row of the Azure app, and then click Edit.

   The Edit Azure app screen appears.

4. In the Edit Azure App screen, provide the following details, and then click Save:

   - Application Secret: Enter the new client secret.

   - Certificate: Upload the Azure certificate file.

   - Certificate Password: Enter the password for the uploaded certificate.

   Once you have updated the client secret in the Command Center, delete the copied client secret Value.

×

Loading...