PingOne

Generating a client secret for an application

For security reasons, change the client secret for OpenID Connect (OIDC)-based applications on a regular basis. Learn more in Rotating the client secret for an application.

Client secrets apply only to OIDC-based applications.

Steps

  1. In the PingOne admin console, go to Applications > Applications and browse or search for the application.

  2. Click the application entry to open the details panel.

  3. On the Configuration tab, in the General section, click Generate New Secret.

  4. From Retain Previous Secret, select how long to retain the previous client secret:

    Choose from:

    • Retain for 1 day: The previous secret expires 24 hours after the creation of the new secret.

    • Retain for 7 days: The previous secret expires 7 days after the creation of the new secret.

    • Retain for 30 days: The previous secret expires 30 days after the creation of the new secret.

    • Retain for custom timeframe: Configure the secret to expire after a custom timeframe. For example, 14 days. The maximum retention period is 90 days.

    • Do not retain previous secret: The previous secret expires immediately. Application users might experience sign-on errors until the application is updated to use the new secret.

      This setting can’t be changed. If you’re not sure how long you should retain the previous client secret, select Retain for 30 days or Retain for custom timeframe with the desired duration. If you don’t need to keep the previous secret for that long, you can revoke it manually before the retention period expires. Learn more in Revoking a client secret for an application.

  5. Select I understand and would like to continue and click Confirm.

Result

PingOne generates a new client secret for the application.