
Quick Answer
To update an expiring or expired Entra ID client secret for the Pinnacle Series Entra ID integration, create a new client secret in Entra ID, copy its Value, and paste it into the Client Secret field under Integrations > Configure next to Microsoft Entra ID in the Pinnacle Series Administration Portal.
What This Article Helps With
- Replacing an expiring or expired Entra ID (Azure AD) client secret used for the Pinnacle Series Entra ID integration
- Testing the Entra ID sync after updating the client secret
- Troubleshooting a broken sync caused by pasting the Secret ID instead of the Secret Value
How to Update the Client Secret
- In Entra ID, open App Registrations and select the application used to sync with Pinnacle Series.
- Select Certificates & secrets from the left-hand menu.
- Delete the existing client secret.
- Select New client secret.
- Name the new secret and set its expiration to 24 months or less.
- Select Add.
- Copy the new secret's Value before leaving this screen. The Value cannot be retrieved again once you navigate away.
- Log in to the Peak Experience and open the Administration Portal.
- Select the Integrations tab.
- Select Configure next to Microsoft Entra ID.
- Paste the copied Value into the Client Secret field.
- Save your changes.
- To test the sync, open the Users tab in the Administration Portal.
- Select the green Add User button.
- Select Sync with Active Directory to open the sync preview.
Confirm the update worked by checking that the sync preview shows Added, Modified, and Deleted counts in the top right. If the preview instead shows an Ignore label, see Troubleshooting below.
Troubleshooting: Sync Preview Shows "Ignore"
What You Might See: The sync preview displays an Ignore label instead of Added, Modified, and Deleted counts.
Why This Happens: This typically occurs when the Secret ID was pasted into the Client Secret field instead of the Secret Value.
How to Fix It:
- If you are still on the Certificates & secrets page in Entra ID, copy the Value (not the Secret ID) and paste it into the Client Secret field again.
- If you have already left that page, the Value can no longer be retrieved. Create a new client secret, copy its Value, and update the Client Secret field in Pinnacle Series with it.
- If the sync still fails after updating with a newly created secret's Value, log a support ticket.
Helpful Tips
- Set the new client secret's expiration to 24 months or less, and plan to rotate it again before it expires to avoid a sync interruption.
- Copy the secret's Value immediately after creating it. Once you leave the Certificates & secrets page, only the Secret ID remains visible - the Value cannot be retrieved again.
Common Questions
Why Does the Sync Preview Show "Ignore" Instead of Added, Modified, and Deleted Counts?
This usually means the Secret ID was pasted into the Client Secret field instead of the Secret Value. See the troubleshooting steps above to correct it.
What Do I Do if I Can't Retrieve the Secret's Value After Leaving the Page?
Create a new client secret in Entra ID, copy its Value immediately, and update the Client Secret field in the Pinnacle Series Administration Portal with it.