Entra App Registration - Policy to Restrict Client Secret Expiration to 6 Months Globally

Question

Hello,

A customer wants to restrict App registration client secret to 6 months for all developers globally. Is there a way to implement this, for example, using Azure Policy?

Thanks.

Answer 1

There is something that may help you:

https://learn.microsoft.com/en-us/graph/api/resources/applicationauthenticationmethodpolicy?view=graph-rest-1.0

Answer 2

Hello @Terru Ahmad,

Thank you for posting your query on Microsoft Q&A.

From your description, I understand that you want to restrict client secret validity to 6 months. As Andy suggested, you can manage this using an application management policy.

Additionally, if your main objective is to ensure that client secrets only remain active for 6 months, I recommend creating client secrets in your App Registration with a 6-month expiration. This can be easily configured in the Azure Portal when setting up the client secret.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.