App details

After clicking on a row, a detail view of the selected app will be shown.

Navigation Menu

On the left-hand side, you can navigate through different sections:

• Overview: Displays the overview section with some details and insights of the current app.
• Certificates: Displays all certificates associated with the app, along with their expiration dates.
• Secrets: Lists all client secrets and their validity periods.
• Owners: Shows the users who have administrative control over the app.
• Settings: Provides additional configuration options.

Overview

The Overview tab provides key information about the application, including:

• Application (client) ID: The unique identifier for the app.
• Object ID: The identifier used within Entra ID.
• Credential Warnings: Alerts for expiring or expired credentials. The Show more button redirects to the relevant section to examine those credentials.
  • 🟡 Yellow Warning: Indicates that some credentials are about to expire.
  • 🔴 Red Warning: Indicates that some credentials have already expired.

Owners

The Owners section shows a list of all current owners of the app.
Owners have special permissions that let them manage the app’s credentials, which is explained in the next section.

Both users and applications (service principals) can be owners, and they will all appear in this list.

The <IdentityApp /> interface lets you manage application owners—you can add or remove owners as needed. This works for both App Registrations and Enterprise Applications.

How to update app ownership:

1. Go to App Registrations > All or Enterprise Applications > All and use the search box to find the app.
2. Click on the app to open its details page.
3. Open the Owners tab and click the + (Add owner) button.
4. A popup will appear. Search for the user or app you want to add, then select it.
5. To remove an owner, find them in the list and click the delete icon next to their name.

Certificates and Secrets

The Certificates and Secrets tabs share a similar interface, each displaying two sections:

1. Expired and expiring soon: Credentials that require attention (either expired or approaching expiration).
2. Current: Credentials that are still valid and do not require immediate action.

For any credential that is expiring or has expired, EasyLife 365 Identity automatically creates a task to track the necessary actions.

Each section contains a table with the following columns, depending on the credential type:

Column	Description
Description	A brief description of the credential.
Certificate/Secret ID	A unique identifier assigned to the certificate/secret.
Thumbprint (certificates only)	The certificate’s thumbprint for easier identification.
Task Status	The current status of the task related to the credential.
Assigned To	The user responsible for handling the task (if assigned).
Expiration	The expiration status of the credential.

When EasyLife 365 Identity detects an expiring or expired credential, it automatically assigns it a New task, indicating that action is required.
Tasks can be assigned to users, who then take responsibility for handling the credential renewal or removal.
Once assigned, the user can update the status to Open to indicate they are actively working on it.
Users can also add comments to communicate relevant details to others.

To edit a task, click the button at the right of the row. A window will appear, allowing you to:

• Assign the task to yourself or another user.
• Update the task status.
• Add or modify comments.

info

🔒 Permissions: Only Only application owners and users with permissions to modify the application can assign tasks. Other users will see a warning if they lack sufficient permissions.

In the "Certificates" and "Secrets" cards, we show a green tag if the credentials are current.

Manage Secrets

How to Add a Secret

1. Go to the Secrets tab of your application.
2. Click the “Generate new” button (green button at the top right).
3. A popup titled “Generate new secret” will appear.
4. Select the expiration period from the dropdown (recommended: 180 days).
5. (Optional) Enter a description for the secret.
6. Click “Let’s do it” to create the secret.
7. The new secret will now appear in the list with details like Secret ID, expiration date, and status.

How to Remove a Secret

1. In the Secrets tab, find the secret you want to remove.
2. Click the trash bin icon next to its expiration date.
3. A confirmation popup will ask, “Are you sure?”
4. Review the secret details shown to make sure it’s the right one.
5. Click “Yes” to delete the secret, or “Cancel” to go back.

warning

⚠️ Tip: Before deleting a secret, make sure it’s not currently in use by any apps to avoid service disruptions.

Manage Credentials (Certificates)

The Certificates tab lets you upload or remove public key credentials (certificates) used by the app. These are not SAML certificates: SAML-based certs are managed separately and are not supported by this feature.

How to Add a Certificate

1. Go to the Certificates tab in the app’s registration page.
2. Click the green “Add certificate” button.
3. In the popup window:
   • Click “Choose File” to upload a .cer, .pem, or .crt file.
   • (Optional) Add a description.
4. Click “Let’s do it” to complete the upload.
5. The certificate will appear in the list with its description, thumbprint, ID, and expiration date.

How to Remove a Certificate

1. In the Certificates list, find the one you want to delete.
2. Click the trash bin icon next to the expiration date.
3. A confirmation popup will appear asking if you're sure.
4. Click “Yes” to confirm or “Cancel” to go back.

warning

⚠️ Reminder: Make sure the certificate is not currently in use to avoid breaking authentication for your app.

SAML Certificates

For enterprise apps that use SAML authentication, we do not display "Certificates" and "Secrets" tabs. Instead, we display the "SAML certificates" tab which shows the details of the SAML certificates related to the application.

Settings

The Settings tab allows you to view and modify configurations for the current app. Only application owners and users with permissions to modify the application have permission to make changes.

You can disable notifications for expiring credentials by unchecking the "Receive notifications for expiring credentials" option. This can be useful if the app is no longer in use or is being managed separately.