Update the Client Secret in a Microsoft Entra ID Application Registration

A GivingData application registration in Microsoft Entra ID is created during the setup for each Microsoft integration with GivingData. The Client secret for the application registration expires in 24 months as a security measure against long-term credential risks. 

In GivingData, an error message similar to the example below displays when the client secret has expired.

 

Once the client secret for the application registration has expired, follow the steps below to generate a new client secret and update it in your GivingData site.

1. Log into the Azure Portal (https://portal.azure.com) and navigate to the Microsoft EntraID service.
    
2. In the left-side menu, click App registrations, and then click the GivingData application registration.
    
3. In the left-side menu, click Certificates & secrets.
4. Click Client secrets.
5. Click New client secret.
6. Enter any description, select 24 months in the Expires dropdown, and then click Add.
    
7. Copy the Client secret value.
   • ⚠️ Copy and securely store the client secret value immediately after creation, as it will not be visible again once you navigate away from the page.
      
8. In your GivingData site, click the gear icon in the navigation menu.
9. Click Client & Feature Configuration. 
   
    
   • If you do not see this option, reach out to your GivingData contact. 
10. Click the pencil icon next to a feature for which the value needs to be updated.
     
    • If you do not see this option, reach out to your GivingData contact. 
    • If you have multiple Microsoft integrations configured with GivingData, repeat steps 10-11 for each integration.
11. In the Client Secret field, enter the updated Client secret value you copied in step 7, and then click Save.