{"id":1957,"date":"2025-04-23T17:16:23","date_gmt":"2025-04-23T17:16:23","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2025\/04\/23\/spring-cleaning-a-cta-for-azure-devops-oauth-apps-with-expired-or-long-living-secrets\/"},"modified":"2025-04-23T17:16:23","modified_gmt":"2025-04-23T17:16:23","slug":"spring-cleaning-a-cta-for-azure-devops-oauth-apps-with-expired-or-long-living-secrets","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2025\/04\/23\/spring-cleaning-a-cta-for-azure-devops-oauth-apps-with-expired-or-long-living-secrets\/","title":{"rendered":"Spring Cleaning: A CTA for Azure DevOps OAuth Apps with expired or long-living secrets"},"content":{"rendered":"<p><strong>Today, we officially <a href=\"https:\/\/devblogs.microsoft.com\/devops\/no-new-azure-devops-oauth-apps\/\">closed the doors on any new Azure DevOps OAuth app registrations<\/a>.<\/strong><\/p>\n<p>As we prepare for the end-of-life for Azure DevOps OAuth apps in 2026, we\u2019ll begin outreach to engage existing app owners and support them through the migration process to use the <a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity-platform\/v2-overview\">Microsoft Identity platform<\/a> instead for future app development with Azure DevOps. This platform, used across Microsoft teams, can access the same Azure DevOps REST APIs, with the added benefit of ongoing regular investment and additional security controls available to company admins. We\u2019ve collected a list of <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/devops\/integrate\/get-started\/authentication\/entra-oauth\">helpful resources from Microsoft Entra docs<\/a> to support you in this migration effort.<\/p>\n<p>We will also begin regularly removing apps with secrets that have expired more than six months ago (180 days ago). App owners of these inactive apps will be informed and if there\u2019s any further need for the app registration between now and Azure DevOps OAuth\u2019s end-of-life in 2026, you are asked to rotate the app secret before April 30.<\/p>\n<p>Lastly, we\u2019ll also be reaching out to app owners of apps with long-lasting secrets. Now with <a href=\"https:\/\/devblogs.microsoft.com\/devops\/new-overlapping-secrets-on-azure-devops-oauth\/\">our new overlapping secrets feature<\/a>, apps with long-lasting secrets have a downtime-free approach to regularly rotate their secrets and move away from unnecessarily long-living secrets. We recommend all app owners build a secret rotation flow into their app code. Not only is this good app security practice, all new Azure DevOps OAuth app secrets will now default to a 60-day secret lifespan.<\/p>\n<p>The post <a href=\"https:\/\/devblogs.microsoft.com\/devops\/spring-cleaning-cta-for-azure-devops-oauth-apps-with-expired-or-long-living-secrets\/\">Spring Cleaning: A CTA for Azure DevOps OAuth Apps with expired or long-living secrets<\/a> appeared first on <a href=\"https:\/\/devblogs.microsoft.com\/devops\">Azure DevOps Blog<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"<p>Today, we officially closed the doors on any new Azure DevOps OAuth app registrations. As we prepare for the end-of-life [&hellip;]<\/p>\n","protected":false},"author":0,"featured_media":94,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1957","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-azure"],"_links":{"self":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/1957","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/comments?post=1957"}],"version-history":[{"count":0,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/1957\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media\/94"}],"wp:attachment":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media?parent=1957"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/categories?post=1957"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/tags?post=1957"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}