Rotating the client secret for a resource

For security reasons, you should change a resource’s client secret on a regular basis. If you think the client secret might have been compromised, you should change it immediately.

After you update a client secret in PingOne, you must also update all resources that use the secret. You can retain the previous client secret to give resource owners time to update the secret without causing errors for their users. Use the PingOne admin console or the PingOne API to change a client secret.

For more information, see: