Exporting Registered Apps expiring secrets and certificates

This blog post aims to streamline the manual extraction of your Registered Applications whose secrets are either nearing expiration or have already expired. The process utilizes a PowerShell script and concludes by exporting the results to a CSV file.

Step 1 - Prepare an output folder

This will become the target folder into which your .csv file will be parsed,

Step 2 - Microsoft.Graph module

Install the Microsoft.Graph module which is required by the powershell module,

Install-Module Microsoft.Graph

The Microsoft.Graph module exceeds the default size of 4096 so we need to increase the module import limitations to 32768

Run the following command in your powershell,

$maximumfunctioncount = 32768

then,

Import-Module Microsoft.Graph

Step 3 - Run the powershell module

The powershell script can be downloaded from here,

You will be prompted to login to your azure account,

You will then be prompted with an Approval required window,

Select the request approval button,

Microsoft Security will receive your request,

You will receive a request receipt sent email from Microsoft Security,

You will receive a request approved email from Microsoft Security a few seconds later,

Now go back to your PowerShell script:

Select the number of days to monitor your secrets expiration: eg 60 days,

You have the option to view the Registered Apps that have already expired secrets,

Select your output destination and include the csv name

eg C:\AppRegSecrets\output\regapp.csv

The .csv will be created in your defined destination folder,

Having a look at the output .csv, you can view the list of your expired and expiring secrets based on the expiration value you provided when running the powershell script.

To verify, go to your Registered App and select the Certificates & Secrets > verify the expiration date on your secret and remediate as per your business processes.

— I hope this blog helped provide a mechanism in assisting you to proactively monitor your App Reg expiring secrets —

16 comments

  1. Oh my goodness! Awesome article dude! Thanks, However I am going through troubles with your RSS.
    I don’t know why I cannot join it. Is there anybody getting the
    same RSS problems? Anyone that knows the answer can you kindly respond?
    Thanx!!

  2. Hello, Neat post. There is an issue together with
    your site in web explorer, would test this? IE nonetheless is the market leader and a huge section of
    other people will pass over your fantastic writing because of this problem.

  3. wһoah this bl᧐g is excellent i love studying
    уour articles. Keep up the good work! You alreɑdy know, many
    people аrе loоking aroᥙnd for this info, you can aid them
    ɡreatly.

  4. Ꮋello there! I simрly wish t᧐ give yߋu a huɡe thumbѕ up for your
    excellent information you have got riɡһt
    here on this post. I will be comіng back to your web site for more
    soon.

  5. Wһat’s up to every one, the contents existing at this site
    are genuineⅼy aѡesome for people experіence, well, keep
    up the gooԀ work felloᴡs.

  6. Good day I am so excited I found your weblog, I really found you by accident, while I was looking on Aol for something else, Regardless I am here now and would just like to say cheers for a fantastic post and a all round interesting blog (I also love the theme/design), I don’t have time to go through it all at the moment but I have book-marked it and also added your RSS feeds, so when I have time I will be back to read a great deal more, Please do keep up the awesome work.

  7. Thanks for another informative blog. Where else could I get that type of info written in such a perfect way? I’ve a project that I am just now working on, and I’ve been on the look out for such info.

  8. Howdy! Someone in my Myspace group shared this website with us so I came to look it over. I’m definitely enjoying the information. I’m book-marking and will be tweeting this to my followers! Terrific blog and amazing design.

  9. Heya i抦 for the first time here. I came across this board and I find It truly useful & it helped me out much. I’m hoping to provide one thing back and help others like you helped me.

Leave a comment

Your email address will not be published. Required fields are marked *