What is a client secret?

Question

What is a client secret?

Kylee Kasper 20

I would like to register my app with Entra ID but got caught up on the client ID? Is this simply a string of text/ numbers that I make up? Or is it something that Microsoft provides for me?

Accepted answer

1 additional answer

Your answer

Answer 1

Harshitha Eligeti 4,380 Microsoft External Staff Moderator

Hi @ Kylee Kasper •
Thank you for sharing your issue on Microsoft Q&A.

In addition to the information provided by Andy David - MVP.
A client secret is a secret known only to your application and the authorization server. It is used to authenticate your application to the authorization server when your application requests an access token. Regarding your question about registering your app with Entra ID, the App ID (client ID) will be created automatically. If you need to add a client secret, it is optional and only needed if your OAuth app will use it to authenticate to Azure. If your app uses public authentication methods, you may not need a client secret. The app can authenticate users without needing to include a client secret in requests, which is a best practice for security.

Feel free to reach out if you need further assistance.

Best Regards.
Harshitha Eligeti.

Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2024-11-07T20:02:00.0133333+00:00

Hi @Kylee Kasper •
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2024-11-08T19:15:46.3466667+00:00

Hi @Kylee Kasper •
Following up to see if the above answer was helpful. If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.
Kylee Kasper 20 Reputation points

2024-11-18T20:14:46.28+00:00

Hi @Harshitha Eligeti , thank you for the help! What about the redirect URI? Is this something microsoft provides after submitting the app's bundle ID and package name? Or is it something I must provide, and if this is the case, where do I find it?
Harshitha Eligeti 4,380 Reputation points Microsoft External Staff Moderator

2024-11-19T23:43:52.8933333+00:00

Hi @Kylee Kasper •
You should check with your application development team, as they are responsible for creating the application. They should provide the correct redirect URI. Once you have it, you can update or paste it into the appropriate field and save the URI in Azure.

Answer 2

Andy David - MVP 157.8K MVP Volunteer Moderator

Are you following this?

The App ID (client ID) will be created automatically.

https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app?tabs=certificate

IF you mean the client secret and ID, you can generate following:

https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app?tabs=client-secret#add-credentials

add a secret

Kylee Kasper 20 Reputation points

2024-10-30T16:49:26.4133333+00:00

Thank you for the prompt response. I was referring to the App/ client ID.

In regards to the client secret, is this a requirement? Or is it an optional field?
Andy David - MVP 157.8K Reputation points MVP Volunteer Moderator

2024-10-30T16:53:56.2666667+00:00

Its completely optional and only needed if your OAuth app will use it to authenticate to Azure.
Kylee Kasper 20 Reputation points

2024-11-18T20:03:45.8966667+00:00

Thanks for your help, Andy! One more question, when registering an app for Entra ID, is the redirect URI provided by microsoft after submitting the app bundle ID and app package names? Or is the redirect URI something that we must provide, and if this is the case, where is it found?

Share via

What is a client secret?

1 additional answer

Your answer