Deleting Client Secrets link

Revocation Process link

1. Navigate to your organization’s settings:

   • Go to Organizations
   • Select your organization
   • Click Settings
   • Select Client Secrets

   

   Click the image to enlarge

2. Locate the client secret to revoke

   

   Click the image to enlarge

3. Click the Trash bin button

   

   Click the image to enlarge

4. Confirm the revocation by typing revoke and by clicking the revoke button.

   

   Click the image to enlarge

Important Considerations link

• Revocation is immediate and permanent
• Revoked secrets cannot be reactivated
• All automated processes using the secret will fail
• Create a new secret if needed

Before Deleting link

Before revoking a client secret:

1. Identify all automation using the secret
2. Plan for service disruption
3. Create and configure a replacement secret if needed
4. Update automation with new secret before deleting the old one

When to Delete link

Common scenarios for client secret deletion:

• Security concerns or potential compromise
• Project completion
• Automation changes
• Regular secret rotation
• Approaching expiration

After Deletion link

After revoking a client secret:

1. Verify automation is updated with new credentials
2. Remove the old secret from all automation configurations
3. Document the change
4. Monitor systems for any missed dependencies

Best Practices link

• Regularly audit active client secrets
• Document secret usage and dependencies
• Plan secret rotation before expiration
• Test automation with new secrets before revoking old ones
• Remove unused secrets promptly