Book a Demo
Skip to main content
How can we help?
← Back to LocoDELEGATIONS Help
Print

Renew or replace the Microsoft Entra client secret

Posted
Updated
ByAdrian Sole

The council owns the Microsoft Entra application credential and chooses its expiry period in accordance with its security policy. Plan renewal early so council users do not lose SSO access.

Before the secret expires

  1. Record the current credential’s expiry date in the council’s operational or credential-management process.
  2. Contact support@locosoft.co.nz before the expiry date to coordinate the change.
  3. Agree on a secure method and timing for transferring the new secret value.
  4. Create the replacement secret in the existing Microsoft Entra app registration.
  5. Record the new value securely when it is displayed. The complete value cannot be retrieved later.

Allow for a controlled change

Where the council’s policy permits, keep the existing credential valid until LocoSOFT has applied and tested the replacement. This reduces the risk of an avoidable interruption.

Information to provide

  • Council name and LocoDELEGATIONS environment.
  • Application (client) ID, if needed to identify the integration.
  • Expiry date of the current credential.
  • Preferred change window and test contact.

Transfer the new secret only through the secure method agreed with LocoSOFT. Do not include it in a general support ticket or ordinary email.

After the update

  • Test sign-in with an authorised user.
  • Confirm that role-based access still operates correctly.
  • Retire the previous secret once the replacement is confirmed.
  • Record the new expiry date and renewal owner.

If a secret has already expired

Users may be unable to authenticate until a valid replacement is applied. Contact support@locosoft.co.nz and identify the request as an SSO credential-expiry issue.

Table of Contents