Disablement of Symmetric keys for Microsoft Entra first-party applications Service Principals
From Microsoft 365 Message Center Archive by Merill Fernando · Microsoft may not have sent this notice to your tenant.What the notice says
Microsoft’s text, safely structuredSymmetric keys authentication relies on a shared key being sent by the client in its request to security token service. In the event the key is intercepted, it is permanently compromised.
To improve security posture of Microsoft first-party Applications and better protect customer data, client applications will no longer be able to use Symmetric Keys on Service Principals for First-Party Applications and must move to Asymmetric keys.
When this will happen
June 15, 2024
How this affects your organization
After this change is implemented, any client requests that use Symmetric Keys on their Microsoft first-party Application Service Principals will fail.
What you can do to prepare
Customers currently using Symmetric keys for authenticating Microsoft first-party application's Service Principals in their tenant will need to replace these with Asymmetric keys, as described in the link Add-MgServicePrincipalKey
What changed
Between archive captures, newest firstThe archive supplies one version of this notice.
Learn more
Links from the notice and their documentation checks- Add-MgServicePrincipalKeyNot read yet
Related public changes
No related announcements were found in the saved public history. Check the source for newer announcements.
Not confirmed here
What this page cannot tell you- Whether your tenant is affected: this is Microsoft's notice, not a check of your settings.
- 1 linked page has not been read yet.