Skip to main content

Rotating Microsoft Graph Oauth App Client Secret

The process for rotating a new client secret in the Azure console

Updated today

This process will disconnect all users of the Microsoft Graph integration in Caddi - after completion all users will need to re-connect in order to continue running loops.


​
1. Go to Azure Console

2. Navigate to Microsoft Entra ID (if not on home page, use the top search bar)

3. On the left, expand the `Manage` menu and click on `App registrations`

4. Click on the `All applications` tab if you do not see the Caddi app in the list

5. Click on the Caddi oauth app

6. In the top `Essentials` section, click on the `Client credentials` link that will say something like `0 certificate, 1 secret`
​
​

7. Click on `New client secret`
​

8. A panel will open on the right - enter a description for this secret and an expiry - Caddi recommends 6+ months to reduce interruptions to loop running

9. Click the `Add` button at the bottom of the panel - it may take a minute or two for this panel to save and disappear

10. The secret will now be in the list of `Client secrets` on the page

11. Copy the `Value` of the secret (not the Secret ID) - this will be the client secret value you enter in Caddi later. **Copy the value now, you will not be able to after you naviggate away from this page!**

12. Navigate to the integrations in Caddi - https://app.trycaddi.com/credentials - and click on the `Integrations Setup` tab. Here you will delete and re-create the Microsoft Graph enterprise connection with the new client secret.

See Caddi's Microsoft Setup docs for additional information about the Microsoft Graph oauth app.

Did this answer your question?