Client Secret expiration

Client Secret expiration

book

Article ID: CTX568215

calendar_today

Updated On:

Description

The expiration period for the Client Secret cannot be more than two years from now.


Instructions

For security purposes, Microsoft removed the ‘Never Expire’ option for the Client Secret Expiry in April 2021.
The expiration period cannot be more than two years from now.

An alert will be displayed on the Citrix DaaS - [Full Configuration] - [Hosting] console before the secret key expires. But, if the secret key expires, there will be connection issues.
It is necessary to get the application secret in Azure and change it in the Add Connection and Resources wizard.

※ Citrix recommend that change the keys regularly for security purposes. Be sure to save the key because the key cannot be retrieved later.

NOTE:
Copy the client secret value (NOT Secret ID) and the expiration date, and edit the corresponding connection and replace the content in the Application secret and Secret expiration date field with the values you copied.  

Environment

Citrix is not responsible for and does not endorse or accept any responsibility for the contents or your use of these third party Web sites. Citrix is providing these links to you only as a convenience, and the inclusion of any link does not imply endorsement by Citrix of the linked Web site. It is your responsibility to take precautions to ensure that whatever Web site you use is free of viruses or other harmful items.

Issue/Introduction

The expiration period for the Client Secret cannot be more than two years from now.

Additional Information

More details on the feature from Citrix and Microsoft Documentation:

Get the application secret in Azure
https://docs.citrix.com/en-us/citrix-daas/install-configure/connections/connection-azure-resource-manager.html#get-the-application-secret-in-azure

Manage the application secret and secret expiration date
https://docs.citrix.com/en-us/citrix-daas/install-configure/connections/connection-azure-resource-manager.html#manage-the-application-secret-and-secret-expiration-date

Client Secret expiration now limited to a maximum of two years
https://devblogs.microsoft.com/microsoft365dev/client-secret-expiration-now-limited-to-a-maximum-of-two-years/