Application credentials without expiration
Identifies app registrations with client secrets or certificates that have long or no expiration dates.
How to fix it
Set expiration dates on all application credentials (max 1-2 years). Use certificates instead of client secrets when possible.
Required Microsoft Graph permissions
EntraAnalyzer needs the following read-only Graph permissions to evaluate this rule:
Application.Read.All
Further reading
Run this check on your tenant
EntraAnalyzer evaluates this rule automatically on every scan and emails you the results.
Get started — free first scan →