# Credential Expiry

### Purpose of this report

The **Applications – Credential Expiry** report provides a centralized overview of **application credentials (certificates and secrets)** in your Entra ID tenant, with a strong focus on:

* Identifying **expired** and **soon-to-expire** credentials
* Reducing the risk of **application outages** caused by expired secrets or certificates
* Supporting **operational hygiene and security reviews**
* Helping teams understand **which applications are still in use** and which may be candidates for cleanup

Expired or unmanaged credentials are a common cause of production incidents. This report exists to make credential lifecycle management **visible, actionable, and auditable**.

***

### What data the report is based on

The report aggregates data from:

* Entra ID application registrations and enterprise applications
* Application credentials (secrets and certificates)
* Sign-in and usage indicators collected by Bs ure Insights

> **Note**\
> Application usage information is correlated with the **Applications – Usage** report. An application may have valid credentials but show no recent usage, which can indicate it is no longer needed.

***

### When should you use this report?

Typical use cases include:

* 🔔 **Proactive monitoring** of credentials nearing expiration
* 🔥 **Incident response** when an application stops working due to authentication failures
* 🧹 **Cleanup initiatives** to identify unused applications with valid credentials
* 🔐 **Security reviews and audits** to ensure credentials follow best practices

***

### Report overview

#### High-level metrics

At the top of the report, you’ll find summary indicators such as:

* **Total applications** detected
* Filters for **Enabled**, **App in use**, **Credential status**, and **Credential type**
* Tenant selector for multi-tenant scenarios

These allow you to quickly scope the report to the applications that matter most.

***

### Filters and slicers

The following filters are available to help narrow down the data:

#### Application & status filters

* **Enabled**\
  Filter on whether the application is currently enabled in Entra ID.
* **App in use**\
  Indicates whether the application has recent sign-in activity (based on Usage data).
* **Credential status**
  * Valid
  * Expired
* **Credential type**
  * Secret
  * Certificate

#### Ownership & governance filters

* **Application owner**\
  Filter on whether an application has an assigned owner.
* **Application owner name**\
  Narrow results to a specific owner.

#### Tenant & search

* **Tenant**\
  Useful in environments where multiple tenants are monitored.
* **Application name search**\
  Free-text search to quickly locate a specific application.

***

### Application Details Table

The **Application Details Table** is the core of the report. Each row represents a single application credential.

#### Key columns explained

* **Application name**\
  Name of the application registration or enterprise application.
* **Created**\
  When the application was originally created.
* **Application owner**\
  Indicates whether an owner is assigned (important for accountability).
* **Credential type**
  * Secret
  * Certificate
* **Credential status**
  * Valid
  * Expired
* **Credential start date**\
  When the credential became active.
* **Credential end date**\
  When the credential expires or expired.
* **Credential duration**\
  Credential lifetime in days (useful for spotting overly long-lived secrets).
* **Enabled**\
  Whether the application is enabled.
* **App in use**\
  Shows whether the application has been used recently.