Skip to main content

Client Secret Configuration

Access Analyzer authenticates to Microsoft Entra ID using a client secret. The client secret is generated within your registered Microsoft Entra ID application and provided to Access Analyzer when configuring the Entra ID connector.

Generate a client secret​

  1. Sign in to the Microsoft Entra admin center.

  2. Navigate to Identity > Applications > App registrations.

  3. Click the All applications tab and select your registered application.

  4. Click Certificates & secrets under the Manage section.

  5. On the Client secrets tab, click New client secret.

  6. Specify the following:

    • Description — Enter a description for the secret
    • Expires — Select an expiration period

  7. Click Add. The client secret value is displayed in the Value column.

warning

Copy the client secret value immediately. Once you navigate away from this page, the value can't be retrieved and you'll need to create a new secret.

Assign roles to the app​

The registered application must be assigned to the Global Administrator role for Entra ID data collection.

  1. Sign in to the Microsoft Entra admin center.

  2. Navigate to Identity > Applications > App registrations.

  3. Click the All applications tab and select your registered application.

  4. Click Roles and administrators under the Manage section.

  5. On the All roles page, search for Global Administrator.

  6. Click the Global Administrator role. The Assignments page opens.

  7. Click Add assignments in the top toolbar.

  8. Search for and select your registered application.

  9. Click Add. The application is listed on the Assignments page.