MOR-PROC-035 Version 1 Last Review Date: Feb, 2025
Update App Registration Secret
Overview
In the App Service Environment Variables the following values are stored:
- AzureAdClientID
- AzureADClientSecret The AzureADClientSecret field contains a secret key generated in an Entra ID App Registration, allowing secure access of the app to the Entra ID environment. If the Secret in the App Registration expires, the authentication process into the the platform will fail with the following error:
Access Denied An error occurred when trying to create a controller of type 'UsersController'. Make sure that the controller has a parameterless public constructor.
Note: In the past, Secret expiries could be set to any future value, such as 100 years in the future, effectively meaning that no update would be required. This looks to have changed now and the maximum that can be set is two years.
Links
Update Steps
Regenerate Secret
Access Azure Portal
Find App Registration
- Navigate to Entra ID
- Click 'App Registrations'
- Click the appropriate App Registration (match the AzureADClientID to the client ID of the App Registration)
Create a new Secret
- Click 'Manage'
- Click 'Certificates & Secrets'
- Click 'New client secret'
- In the popup, set the description to the environment name, and expiry to two years
- Click 'Add'
- Click 'Confirm'
- Note the client value (copy this immediately as it cannot be viewed later)
Update App Services
Access Azure Portal
Access App Service
Update client value
- Click 'Settings'
- Click 'Environment Variables'
- Click 'AzureADClientSecret'
- Update the Value field with the new secret value from step 1
- Click 'Apply' on the pop-up
- Click 'Apply' on the Environment Settings pane
Repeat these steps for second App Service for the environment
Restart the application
- Restart both App Services associated with the environment. Allow around 5 minutes for the restart to complete.