Will Oauth2 Authentication access token for Office 365 expire?

已回覆

追蹤

Michael M.

• 2020年07月22日 16:25

We create Oauth2 Authentication access token for Office 365 using the steps in this article http://www.agilepointnxblog.com/create-non-expiring-access-tokens-for-office-365/

However, another article https://www.spblog.net/post/2018/08/24/SharePoint-lifehacks-create-SharePoint-app-registration-with-client-secret-which-never-expires mentions that 

"ClientSecret generated with AppRegNew.aspx is that secret has expiration time. By default expiration is 1 year"

Does anyone encounter problem with Oauth2 Authentication access token for Office 365, and have to generate a new ClientSecret to update access token?

Thanks,

Michael

0

• 正式評論

  

  Varun Agasthya

  • 2020年07月30日 08:19

  Hi Michael,
  
  Client secrets for SharePoint Add-ins that are registered by using the AppRegNew.aspx page expire after one year. The blog : http://www.agilepointnxblog.com/create-non-expiring-access-tokens-for-office-365/ is updated with how to replace an expiring client secret and also how to register app with longer expiration time
  
  Thanks,
  
  Nithya V

  評論操作 永久連結
• 

  Michael M.

  • 2020年08月05日 02:49

  Thank you Nithya. One more question, is it really possible to create client secret with 10 years expiration time? 

  0

  評論操作 永久連結
• 

  Varun Agasthya

  • 2020年08月05日 04:18

  Hi Michael,

  Yes, it is possible to create client secret with 10 years expiration time, please follow the steps in the blog to create client secret with longer expiration time.

   

  Thanks,

  Nithya V

  0

  評論操作 永久連結
• 

  Michael M.

  • 2020年08月05日 13:44

  But the article from Microsoft, https://docs.microsoft.com/en-us/sharepoint/dev/sp-add-ins/replace-an-expiring-client-secret-in-a-sharepoint-add-in, has a note saying that:

  By default, the add-in secret lasts one year. You can set this to a shorter or longer (up to 3 years maximum) by using the -EndDate parameter on the three calls of the New-MsolServicePrincipalCredential cmdlet. The value of the parameter must be a DateTime object set to no longer than 3 years from DateTime.Now.

  So the 3 years maximum doesn't apply to the client secret used by AgilePoint Access Token?

  0

  評論操作 永久連結
• 

  Varun Agasthya

  • 2020年08月06日 05:03

  Hi Michael,

  We have tried to set client secret expiration for 10 years following the steps from the blog and in the output file it shows that expiration is set for 10 years. Please find the screen captures below.

  

   

  Thanks,

  Nithya V

  0

  評論操作 永久連結
• 

  Michael M.

  • 2020年08月06日 16:04

  That's good news. Thank you Nithya.

  I will try it out.

  0

  評論操作 永久連結

請登入寫評論。