Skip to main content

Edit Client Secrets

You can update the core credential properties of a client secret for an Azure application using the Manage Credential Wizard. This includes updating the username and password, editing encrypted notes, and adding usage instructions. This guide walks you through each step of the process.

note

To edit a credential, you must have a master password registered with EmpowerID. You will be prompted to enter it to complete the update.

What You’ll Need

RequirementDescription
Access to Resource AdminYou must be able to view and manage Azure applications in Resource Admin.
Ownership of the SecretYou must be listed as an owner or deputy of the client secret.
Registered Master PasswordA valid master password is required to save changes to the credential.

Steps to Edit a Client Secret Credential

Step 1: Open the Application Overview Page

  1. Log in to Resource Admin.
  2. In the Resource Type dropdown, select Applications.
  3. Search for and locate the Azure application.
  4. Click the Details button to open the application Overview page.
    Application Overview

Step 2: Launch the Manage Credential Wizard

  1. In the left navigation, click Client Secrets.
  2. Find the client secret you want to edit.
  3. Click the gear icon on the secret record and select Manage Credential Wizard.
    Manage Credential Wizard

Step 3: Select the Edit Credential Action

  1. On the Select Options screen, select Edit Credential.
    Edit Credential Action
  2. Click Next.
    The Edit Credential form opens.
    Edit Credential Form

Step 4: Complete the Edit Credential Form

  1. Use the form to update the desired credential values:

    FieldDescription
    Name (required)The internal name of the credential. Used for identification in the system.
    Display Name (required)The label shown in the UI and IAM Shop. Often matches the Name.
    Credential TypeDefaults to Azure Application Secret and cannot be changed.
    Personal CredentialIf checked, the credential will be visible only to the owner and not shareable. Leave unchecked for app secrets.
    User Name (required)The service principal or username associated with the secret.
    Password (required)The updated value of the secret.
    SSH KeyCheck this box if the secret is an SSH private key instead of a password.
    Encrypted NotesOptional field for any sensitive internal documentation. This content is encrypted and stored securely.
    Enter Your Master Password (required)You must enter your master password to confirm the changes. This password is never stored.
    DescriptionAn optional description for reference and context.
    InstructionsOptional usage or handling guidance for those accessing the credential.
    EnabledIf checked, the credential is active and usable. Uncheck to disable access.
  2. Once finished, click Next.

Step 5: Review the Summary and Finish

  1. Review the Operation Execution Summary to confirm the update succeeded. \
  2. Click Submit to continue.
  3. On the Finish or Start Over Workflow screen, choose what to do next:
    • Manage the same credential(s)
    • Manage different credential(s)
    • Finish the workflow
      Finish or Start Over Workflow
  4. Click Submit to complete.

What Happens Next

  • The credential values are updated securely in EmpowerID.
  • Vaulted secrets remain encrypted with the new data.
  • The updated metadata is reflected in the Client Secrets tab for the application.
  • All changes are logged for audit and compliance tracking.