Can I generate Azure AD Client Credentials Secrets using an API?

Question

I want to use my Azure AD App Registration to create multiple Client Secrets. I saw that I can do it manually. However, I want to be able to do the same programmatically through an API. That brings me to the following 2 questions:

1. Is there an API (Graph, or any other) which I can use to automate generation and deletion of the Client Secrets?
2. Is there a limit on how many Client Secrets there can be within a single app?

Answer 1

You can use the /addPassword endpoint for that: https://learn.microsoft.com/en-us/graph/api/application-addpassword?view=graph-rest-beta&tabs=http

Answer 2

You can use PowerShell like so:

   New-AzureADApplicationPasswordCredential -ObjectId "YourAppObjectId"  

Response:

   CustomKeyIdentifier :  
   EndDate             : 9/28/2017 3:57:10 PM  
   KeyId               :  
   StartDate           : 9/28/2016 3:57:10 PM  
   Value               : ZJ0V1Yg4cp4eWIey9DrYspqVdX1pdvY437P/ueGxVLU=  

Find more in the [MSFT DOCS] (https://learn.microsoft.com/en-us/powershell/module/azuread/new-azureadapplicationpasswordcredential?view=azureadps-2.0#example-1--create-a-password-credential)