My AAD Certificate has Expired

Title
My AAD Certificate has Expired
URL Name
AAD-Certificate-has-Expired

Question

I have added an AAD app to ProvisionPoint to grant additional permissions, I can see that the certificate I created has expired. 

How can i get a new certificate to continue using ProvisionPoint?

 

When is an AAD App required?

  • Using M365 Mail as the notification Provider
  • Get Teams activity via Expiry compliance check
  • Custom Actions that need additional permissions to complete their job
  • Custom Service Types, to grant the permission to complete the creation of your choice.
  • Add Terms to the Termstore (managed metadata) in SharePoint from the request form
Answer
When you have added an AAD App linked to ProvisionPoint, the certificate is created in the Admin > Settings > AAD App tab.
This will have an expiration date and before it expires a new version can be created in our app and uploaded to the app registration in Entra Admin Center.
 
Please follow these steps to create a new version:
  1. Open ProvisionPoint as an App Manager role user
  2. Go to Admin > Settings > AAD App you should see your existing app and certificate

  3. Ensure your application Id is correct, this will match the Application client id from Entra


  4. Click +New version button

  5. Confirm the addition, click 'Yes' to continue'
  6. This will show as pending
     
  7. Once created the certificate can be downloaded and uploaded to the app registration in Entra.
    Click the 'Download' button in  the Action column





  8. DO NOT delete the older/existing certificate, this will delete the certificate held in ProvisionPoint.
    Instead, click the 'Disable Certificate version' button in the action column to prevent the older version being used.

  9. A confirmation message will be displayed, click Yes. This will prevent the older certificate being used, that certificate can be removed from the app registration.


  10. Finally move the select to the latest version and click Save. The old version will show the new option to 'Enable the certificate'


Do not delete the certificate unless it is no longer needed and a new certificate is required. This will delete all versions held in ProvisionPoint and will impact any app registrations the certificate is uploaded to.
 
ProvisionPointSECURTIY, COMPLIANCE & GOVERNANCE

Related Articles

Trending Articles

Topics (2)