Will Oauth2 Authentication access token for Office 365 expire?

Answered

Follow

Michael M.

• July 22, 2020 16:25

We create Oauth2 Authentication access token for Office 365 using the steps in this article http://www.agilepointnxblog.com/create-non-expiring-access-tokens-for-office-365/

However, another article https://www.spblog.net/post/2018/08/24/SharePoint-lifehacks-create-SharePoint-app-registration-with-client-secret-which-never-expires mentions that 

"ClientSecret generated with AppRegNew.aspx is that secret has expiration time. By default expiration is 1 year"

Does anyone encounter problem with Oauth2 Authentication access token for Office 365, and have to generate a new ClientSecret to update access token?

Thanks,

Michael

0

• Official comment

  

  Varun Agasthya

  • July 30, 2020 08:19

  Hi Michael,
  
  Client secrets for SharePoint Add-ins that are registered by using the AppRegNew.aspx page expire after one year. The blog : http://www.agilepointnxblog.com/create-non-expiring-access-tokens-for-office-365/ is updated with how to replace an expiring client secret and also how to register app with longer expiration time
  
  Thanks,
  
  Nithya V

  Comment actions Permalink
• 

  Michael M.

  • August 05, 2020 02:49

  Thank you Nithya. One more question, is it really possible to create client secret with 10 years expiration time? 

  0

  Comment actions Permalink
• 

  Varun Agasthya

  • August 05, 2020 04:18

  Hi Michael,

  Yes, it is possible to create client secret with 10 years expiration time, please follow the steps in the blog to create client secret with longer expiration time.

   

  Thanks,

  Nithya V

  0

  Comment actions Permalink
• 

  Michael M.

  • August 05, 2020 13:44

  But the article from Microsoft, https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/replace-an-expiring-client-secret-in-a-sharepoint-add-in, has a note saying that:

  By default, the add-in secret lasts one year. You can set this to a shorter or longer (up to 3 years maximum) by using the -EndDate parameter on the three calls of the New-MsolServicePrincipalCredential cmdlet. The value of the parameter must be a DateTime object set to no longer than 3 years from DateTime.Now.

  So the 3 years maximum doesn't apply to the client secret used by AgilePoint Access Token?

  0

  Comment actions Permalink
• 

  Varun Agasthya

  • August 06, 2020 05:03

  Hi Michael,

  We have tried to set client secret expiration for 10 years following the steps from the blog and in the output file it shows that expiration is set for 10 years. Please find the screen captures below.

  

   

  Thanks,

  Nithya V

  0

  Comment actions Permalink
• 

  Michael M.

  • August 06, 2020 16:04

  That's good news. Thank you Nithya.

  I will try it out.

  0

  Comment actions Permalink

Please sign in to leave a comment.