Regenerating secrets for Azure DevOps OAuth applications
Feb 5, 2024Angel Wong

Summary
Introduces the ability for Azure DevOps OAuth app owners to self-regenerate client secrets directly from their profile page, eliminating the need to contact customer support. This feature allows for proactive replacement of expiring secrets and immediate revocation of leaked secrets. The 'Regenerate Secret' button and expiration date are now visible on the app settings page. Regenerating a secret invalidates the previous secret and all associated access tokens.
More from the Azure DevOps OAuth App Secret Rotation trail
- Azure DevOps OAuth Client Secrets Now Shown Only Once
- Real-Time Security with Continuous Access Evaluation (CAE) comes to Azure DevOps
- Removing Azure Resource Manager reliance on Azure DevOps sign-ins
- Spring Cleaning: A CTA for Azure DevOps OAuth Apps with expired or long-living secrets
- New Overlapping Secrets on Azure DevOps OAuth