For security reasons, you should change a resource's client secret on a regular basis. If you think the client secret might have been compromised, you should change it immediately.
After you update a client secret in PingOne, you must also update all resources that use the secret. You can retain the previous client secret to give resource owners time to update the secret without causing errors for their users. Use the PingOne admin console or the PingOne API to change a client secret.
For more information, see:
- Viewing the client secret for a resource
- Generating a client secret for a resource
- Revoking a client secret for a custom resource
- To use the PingOne API to rotate a client secret, see Resource secret in the PingOne Platform API Reference.