Deleting Client Secrets

Revocation Process

  1. Navigate to your organization’s settings:

    • Go to Organizations
    • Select your organization
    • Click Settings
    • Select Client Secrets

    Navigation to client secrets

    Click the image to enlarge

  2. Locate the client secret to revoke

    Locate the client secret that you want to change

    Click the image to enlarge

  3. Open the client secret details and go to Properties

    Go to Properties page

    Click the image to enlarge

  4. Click Revoke Client Secret

  5. Confirm the revocation by typing revoke and by clicking the revoke button.

    Confirm revocation

    Click the image to enlarge

Important Considerations

  • Revocation is immediate and permanent
  • Revoked secrets cannot be reactivated
  • All automated processes using the secret will fail
  • Create a new secret if needed

Before Deleting

Before revoking a client secret:

  1. Identify all automation using the secret
  2. Plan for service disruption
  3. Create and configure a replacement secret if needed
  4. Update automation with new secret before deleting the old one

When to Delete

Common scenarios for client secret deletion:

  • Security concerns or potential compromise
  • Project completion
  • Automation changes
  • Regular secret rotation
  • Approaching expiration

After Deletion

After revoking a client secret:

  1. Verify automation is updated with new credentials
  2. Remove the old secret from all automation configurations
  3. Document the change
  4. Monitor systems for any missed dependencies

Best Practices

  • Regularly audit active client secrets
  • Document secret usage and dependencies
  • Plan secret rotation before expiration
  • Test automation with new secrets before revoking old ones
  • Remove unused secrets promptly