Manage or rotate client secrets

You can now set up five client secrets for your application. Use this feature to change or rotate your client secret and delete the compromised secrets. Changing your client secrets reduces your application’s vulnerability. You can also use this feature to set up overlapping client secrets to aid in client-secret rotation without downtime.

The Trimble Cloud Console allows you to generate and maintain five client secrets in parallel. This functionality is called overlapping client secrets. When rotating a client secret, you must update any authorized apps with the new value.

To add a new client secret:

1. From the navigation menu of the Trimble Cloud Console, select Applications. The Applications list displays.
2. Select the application to manage or rotate the client secret. The Applications Summary page displays
3. Select + Add Secret to add client secrets. Complete the fields and Save.

To delete a client secret:

1. From the navigation menu of the Console, select Applications. The Applications list displays.
2. Select the application. The Applications Summary page displays.
3. In the Client Secret section, select the Delete Secret icon (trash can) against the secret you want to delete.

All original secrets remain active when adding a new client secret. All secrets are stored in parallel, allowing clients to continue using the existing secret during client secret rotation. You must update any authorized apps with the new value when you rotate a client secret and delete the compromised one to facilitate client-secret rotation without downtime.