You are viewing an earlier version of the admin guide. For the latest version, please visit EmpowerID Admin Guide v7.211.0.0.

Manage Client Secrets

Azure Application Client Secrets are confidential credentials that authenticate applications within Microsoft Azure. They act as passwords for applications, allowing them to securely access Azure resources and services. Each application has a unique client ID that is paired with a Client Secret to form a credential pair. During authentication, an application presents its credential pair to Azure AD, which verifies the credentials and issues an access token. By using Client Secrets, only authorized applications can access Azure resources, ensuring the protection of sensitive information. Proper management of Client Secrets is essential, including regular rotation, secure storage, and immediate revocation if there is any suspicion of compromise. As an application owner, EmpowerID allows you to easily manage your client secrets without having to interact directly with Azure. The following topics will guide you through the process of managing Azure Application Client Secrets in EmpowerID, ensuring seamless security and compliance within your Azure environment.