Skip to main content

Create Client Secrets

As an application owner, you may need to generate client secrets to allow your Microsoft Entra application to connect securely to other services. You can create and store these secrets directly in the Resource Admin portal.

warning

You will only see the client secret value once—immediately after it's created. Make sure to copy and store it in a secure location.

What You’ll Need​

RequirementDescription
Access to Resource AdminYou must have permission to access and manage applications in Resource Admin.
Application OwnershipYou must be the owner or a delegated administrator of the application.

Steps to Create a Client Secret​

1: Open the Create Microsoft Entra Application Client Secret Wizard​

  1. Log in to the Resource Admin portal.
  2. In the Resource Type menu, select Applications.
  3. Search for your application.
  4. Click the gear icon on the application record and select Create Microsoft Entra Application Client Secret.
    Create Microsoft Entra Application Client Secret Action The Client Secret Details form opens.
    Client Secret Details Form

2: Fill Out the Create Client Secret Form​

Complete the fields in both the Client Secret Details and Client Secret Owner Details sections:

FieldDescription
Secret NameRequired. Enter a name to identify the client secret.
Secret DescriptionRequired. Provide a description for the secret’s purpose.
Secret ExpirationRequired. Select an expiration date. The default is one year from the current date.
Select a LocationRequired. Choose the EmpowerID location where the secret should be stored.
Vault this credentialOptional. Select to store the secret in EmpowerID's credential vault.
Enable sharing for this credentialOptional. Allows other users to request access to the secret in EmpowerID.
tip

Sharing, ownership, and access approvals apply only if the credential is vaulted. If you do not vault the secret, EmpowerID will not retain or control access to it after creation.

Under Client Secret Owner Details, complete the following:

  1. In Client Secret Owner, enter the name of the person you want to assign and click to select them.
    The user must exist in EmpowerID and belong to the same Microsoft Entra tenant as the application.
  2. Select Pre-approve access for owner if the credential is vaulted and you want the owner to access the secret without approval.
note

The secret owner is always required, but EmpowerID access control features only apply if the credential is vaulted.

3: Submit the Request​

  1. Click Next to proceed to the summary screen.

  2. Review all entered information carefully on the summary screen.

    • If you need to make changes, click Back to return to the previous step and edit the form.

  3. When ready, click Submit to create the secret.

    After submitting, the Fulfill Microsoft Entra Application Client Secret screen appears, showing the generated client secret. Fulfill Client Secret

    important

    The secret value is displayed only once. Copy and store it in a secure location before continuing.

  4. After copying the secret, click Submit to complete the workflow.

What Happens Next​

  • The client secret is registered with the Azure application.
  • If vaulting and sharing were enabled, those configurations are applied.
  • You can return to the Client Secrets tab in the application record to view metadata or delete the secret.