IS there a way to check expiration of Azure Application Secret Key

Question

IS there a way to check expiration of Azure Application Secret Key

John Parsons 1

I have an application and have a ClientId, ApplicationId, and Secret Key. is there anyway programmatically to check if the Secret Key's expiration? Or just to check if the Secret Key is valid before I try to access GraphAPI?

Answer 1

Vasil Michev 71,621 MVP

Sure, look at the passwordCredentials/keyCredentials property of the app object, and the endDateTime value therein: https://learn.microsoft.com/en-us/graph/api/resources/application?view=graph-rest-1.0
If you are looking for ready-to-use solution, here's one of my sample scripts: https://www.michev.info/Blog/Post/3665/azure-ad-application-registration-inventory-script

John Parsons 1 Reputation point

2022-10-31T16:45:28.72+00:00

My problem is that we are have a SAAS application and it looks like you need admin privilege's to access the Application object (https://graph.microsoft.com/v1.0/applications/{application-id}), which most clients will not do.
Is there no call to the validity of a secret key (without using a users credentials)
John Parsons 1 Reputation point

2022-10-31T16:45:40.527+00:00

My problem is that we are have a SAAS application and it looks like you need admin privilege's to access the Application object (https://graph.microsoft.com/v1.0/applications/{application-id}), which most clients will not do.
Is there no call to the validity of a secret key (without using a users credentials)
Vasil Michev 71,621 Reputation points MVP

2022-10-31T18:48:24.13+00:00

That's an operation that only the application owner can perform, customers have no business poking around secrets configured for the application object or their expiration. They don't even have a way of telling what type of secret is used by any given app, i.e. whether my app is using a client secret that expires in the year 2999.

IS there a way to check expiration of Azure Application Secret Key

1 answer

Activity