Azure Active Directory API Keys

Description

General

• Documentation: https://learn.microsoft.com/en-us/azure/active-directory/
• Summary: Azure Active Directory (Azure AD) is a cloud-based identity and access management service. This detector finds client secrets used by Azure AD applications to interact with Azure AD.

Revoke the secret

The "Certificates & secrets" section of the application configuration lists created secrets and makes it possible to revoke them.

Details for Azure Active Directory API Keys

• Family: credentials

• Category: identity_provider

• Company: Microsoft

• High recall: False

• Validity check available: True

• Analyzer available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Minimum number of matches: 3

• Occurrences found for one million commits: 6.87

• Prefixed: False