Skip to main content

Generating a Client Secret in Microsoft Azure Active Directory/Entra ID

In this guide, we'll take you through the steps to generate a Client Secret.

Written by Alan Butcher
Updated over a week ago

Integrating your Microsoft 365 tenant with Defense.com requires a unique password to be generated, called a client secret. These secrets expire after a set period of time and therefore have to be updated to maintain the integration. This guide covers how to generate a new client secret and update it in the my.defense.com app.

Microsoft Entra ID is the new name for Azure AD.

The names Azure Active Directory, Azure AD, and AAD are replaced with Microsoft Entra ID.

  1. Log in to portal.azure.com.

  2. Once logged in, search for and select Azure Active Directory or Entra ID. This will take you to the Azure AD or Entra ID dashboard.

  3. Under the Azure AD or Entra ID section, click on App Registrations. Here, you'll find a list of your existing app registrations.

  4. Find and select the application for which you want to generate a new client secret. Click on the application's name to access its settings.

  5. In your application's settings, click on the Certificates & secrets option in the left-hand menu.

  6. Under the Client Secrets section, click on the + New client secret button.

  7. Enter a description for the client secret to help you identify its purpose (e.g., Defense.com SIEM). Next, set the expiration duration to 365 days (12 months) to ensure the secret remains valid for one year.

  8. After configuring the client secret, click the Add button. The client secret will be generated and displayed on the screen.

  9. Make a note of the following essential details

    1. Application (client) ID: This is your application's unique identifier in Entra ID. It's displayed at the top of the application's overview page.

    2. Directory (tenant) ID: This is your Entra ID tenant's unique identifier. You can find it on the Entra ID overview page.

    3. Client Secret Value: The actual client secret you generated. Copy and save it securely because you won't be able to retrieve it again.

    4. Expiry date: Note the date when the client secret will expire. In this case, it's set to expire in one year.

  10. Once you've noted these details, just go to: https://my.defense.com/integrations and select your M365 Integration.

  11. Go to Manage Integration at the top right of the page and add your Client Secret Value in the Client Secret field.

    And that's it! 🎉Leave the rest to us, and we'll let you know when the change is complete!

Did this answer your question?