Updating Azure Application’s Client Secret in the Control

  • Updated on Feb 24, 2025
  • Published on Jul 16, 2024
  • 2 minute(s) read
  • Jesse Wilson
  • d
 Prev Next

Azure Application ID and Secret are fundamental components in Microsoft Entra ID for managing and securing applications and services. The Azure Application ID, also known as the Client ID, is assigned to an application when it is registered in Microsoft Entra ID. It serves to identify the application when interacting with Microsoft Entra ID and other Azure services. This ID is used by Workspot Control to access resources in Azure. The Azure Secret, also known as the Client Secret or Application Password, acts as a password for the application. It is associated with the Application ID and is used to prove the application's identity during the authentication process. 

Updating a new Client Secret in Workspot Control 

If the Client Secret gets expired, the Workspot Control won’t be able to communicate to Azure and perform actions on the resources. Here is the step to update Client secret in the Workspot Control, if the ID is about to expire or already expired. 

  • Log in to Control.  

  • Navigate to Setup > Cloud > Public Cloud > Select Action Menu of Azure Cloud 

  • Make a note of Application Client ID  

  • Select App Registrations > Click on All applications. 

  • Verify the Application (client) ID in Azure should match with the Application Client ID in the Control, there could be multiple. 

  • Click on the Application 

  • Click on the Secret, Verify the certificate secret that is going to get expire, there could be multiple. 

  •   Create a new secret and add the client secret. 

  • Give a description and select 12 months (Workspot recommend), however based on the company policy you can select the expiry. 

  •  Copy the new Secret Value, this needs to be added to Command. If you come out from this page, you will not get the option to copy the value of the secret. 

  • In Workspot Control, go to Setup > Cloud and Edit option of the azure Cloud subscription (could be multiple), please double-check the subscription ID. Update the copied Client secret value in the Application Key section and save it. 

Important Note: The Secret Expiry Date is not a mandatory field and Workspot Control cannot validate the date. This is Customer’s Admin responsibility to set the right date. The date will help Workspot Control to track and alert Control Admins two weeks ahead of Client Secret expiry date.  

Verification 

  • To test whether the Application secret update correctly, login to the Workspot Control and initiate a reboot action for a VM from the Control. 

  • Verify the VM Activity log in Azure to make sure the reboot event initiated by Control reaching to Azure.