The topic "Client Secret Expired" is not available in Version 1.0.0

Client Secret Expired

If the client secret for the Digital Assistant expires in the Azure, the tenant will not be able to use the Digital Assistant. Therefore, it is important to renew client secrets before they expire and/or create a schedule to renew secrets as needed. For security reasons, we do not recommend setting the expiration dates to very long time frames.

If a client secret has expired, follow the steps below to renew the client secret in both the App Registration and Bot Channels Registration.

Update Client Secret in App Registration

Each tenant will have their own App Registration. If the client secret expired, it must be renewed in each tenant's App Registration. The Anthology Service team should make sure to replace the client secret before it expires.

  1. In Azure portal, go to the App registrations page.

  2. On the Owned applications tab, locate the <customerId>ReneeBotChannelRegistration<-env>. (You can search the app registrations by Display name or by Application (client) ID.)  Closed

    App registrations

  3. In the menu at the left, select Manage > Certificates & secrets.

  4. Scroll down to the Client secrets section and check the date in the Expires column.  Closed

    Secret expired

  5. If the date is in the past, click the + New client secret button. The Add a client secret pane is displayed.  Closed

    Add secret

  6. In the Description field, specify a name for the client secret.

  7. In the Expires drop-down, select an expiration time based on your team's policies (e.g., 2-3 years).

  8. Click Add. A confirmation message is displayed and a new record is add to the Client secrets grid.  Closed

    New secret added

  9. Click the copy icon on the Value field. (Do not copy the Secret ID.)  Closed

    Copy secret value

    alert Important: The string in the Value field is only visible right after a new client secret is created. It will be masked as soon as you navigate away from the page. Copy the Value string immediately and store it in a safe place.
  10. Navigate to Internal Administration Portal site, click the Tenants tab, and locate the tenant for the app registration select above.

  11. Click the Edit button and paste the copied client secret Value into the Client Secret field.  Closed

    Webapp - Client secret

  12. Save the update to the Internal Administration Portal.

Update Client Secret in Bot Channels Registration

Each tenant will have their own Bot Channels Registration. If the client secret expired, it must be renewed in each tenant's Bot Channels Registration. The Anthology Service team should make sure to replace the client secret before it expires.

  1. In Azure portal, go to the Resource groups page.

  2. Locate the <customerId>-Renee<-env>. (You can search for Bot Channels Registration.)

  3. In the menu at the left, select Settings > Configuration.

  4. Click the Manage link in the Microsoft App ID field label. Closed

    MS App ID - Manage

  5. The Certificates and secrets page is displayed. Scroll down to the Client secrets section and check the date in the Expires column.

  6. If the date is in the past, click the + New client secret button. The Add a client secret pane is displayed.

  7. In the Description field, specify a name for the client secret.

  8. In the Expires drop-down, select an expiration time based on your team's policies.

  9. Click Add. A new record is add to the Client secrets grid.

  10. Click the copy icon on the Value field. (Do not copy the Secret ID.)

    alert Important: The string in the Value field is only visible right after a new client secret is created. It will be masked as soon as you navigate away from the page. Copy the Value string immediately and store it in a safe place.
  11. Navigate to Internal Administration Portal site, click the Tenants tab, and locate the tenant for the app registration select above.

  12. Click the Edit button and paste the copied client secret Value into the App Password field.  Closed

    Web App - App password

  13. Save the update to the Internal Administration Portal.