Update Entra ID Secret

To update the Entra ID secret, we need to create a new secret in the Inforiver Entra ID application.

Steps to Create Secret in Inforiver Entra ID App

1. Select the Inforiver App Registration.

App Overview

1. Go to the Certificates & secrets menu and then click New client secret.

Secret Generation

1. Add 'O365_APP_SECRET_ID' as a client secret and set its expiration as well. Click Add.

Adding the client secret and its expiration

The client secret is added, as shown below:

Methods To Update Entra ID Secret

1. Direct Update in Azure App Service

2. Update via Azure Key Vault

1. Direct Update in App Service Environment Variables

1. Select the App Service.

2. In the left-side menu, click Environment variables.

3. Select 'O365_APP_SECRET_ID'. Click the Edit icon to edit.

Edit O365_APP_SECRET_ID

1. Enter the client secret in the Value field.

Enter client secret

1. Click Apply to save the changes.

2. Update the Entra ID Secret in Azure Key Vault

Prerequisites

Azure Roles:

• You must have the Contributor role for the App Service to restart the App Service.

• You must have the Contributor role for the key vault to change the network settings of the key vault.

• To view and modify the Secrets of the Key Vault, you need to check the Access Configuration of the Key Vault under the Settings section:

Access Configuration (Azure role-based access control)

• If the Access configuration is Azure role-based access control, proceed with and complete all the steps mentioned in Option 1 that follows:

Option 1: Assign Key Vault Administrator Role through RBAC

1. Go to Access control (IAM). Click on Add and choose Add role assignment in the drop-down menu.

Add Role Assignment

1. Under the Job function roles, choose Key Vault Administrator and click Next.

Choose the Key Vault Administrator Role

1. Under the Members Tab, choose Assign access to User, group or service principal and click on + Select members. In the Select members tab, enter your email and click Select. After completing these steps, Click Next.

Add role assignment

1. Verify your role assignment and Click Review + assign.

Review and assign your role assignment

• If the Access configuration is Vault access policy, proceed with and complete all the steps mentioned in Option 2.

Access Configuration (Vault access policy)

Option 2: Vault access policy

1. Go to Access policies and click on Create to create an access policy for the user.

Create Access policy

1. In the Permissions tab, click on Select all to select all permissions under Secret permissions. Ensure all of them are selected. Then, click Next.

Select all Secret permissions

1. In the Principal tab, enter the user email and verify that it is available under Selected item. Click Next.

Enter the user email

1. In the Application tab, keep the default settings, and then select Next.

Click Next in the Application tab

1. In the Review + create tab, verify that all Secret Management Operations permissions are selected, and then click Create.

Review and create the access policy

Step 1: Turn on Public Access to Key Vault (Temporary)

1. Go to the Azure Portal.

2. Navigate to your Key Vault.

3. In the left pane, select Networking in the Settings section.

4. Under Firewalls and virtual networks, switch from 'Disable public access' to 'Allow public access from specific virtual networks and IP addresses'.

Allow public access from specific networks and IP addresses

1. Click on Add your client IP address and click Apply.

Adding your client IP address

1. Open a browser and search “What is my IP” to get your IP address.

Get your IP address

1. Copy the IP address and enter the value into the 'IP address or CIDR' block and click Apply.

Enter IP Address

Step 2: Update the Client Secret in Azure Key Vault

1. Go to the Secrets section under the Objects menu in the Key Vault.

Go to 'Secrets' section

1. Click on aadAppSecret.

Click 'aadAppSecret'

1. Click + New Version.

Adding new version

1. Enter your client secret into the Secret value field and click Create.

Enter the secret

Step 3: Ensure App Service Picks Up the New Secret

1. Go to the Environment variables section in the App Service. Click on Pull reference values to pull the latest values from the key vault secret.

Pull reference values

2. Click Confirm.

Click 'Confirm'

Step 4: Revert Key Vault to Private Access

Go back to Key Vault’s Networking section, select Disable public access, and then click Apply.

Disable public access

Note: It may take a few minutes to replicate the secrets from the Key Vault. If this does not happen immediately, we recommend restarting your app service.