Entra App Secrets: One script to find them all!

Disclosure: This article was written by the team behind ExpiryPulse, a credential expiry tracking tool. The PowerShell script referenced in this article is free to use and MIT licensed. The problem App registration client secrets and certificates in Microsoft Entra ID expire quietly. No banner in the portal, no email from Microsoft, no Teams notification. Just a broken integration at 2am and a frantic team. Entra ID app registrations are easy to create and easy to forget. A developer spins one up for an integration, sets the secret to expire in a year or two, and moves on. Months later that developer might not even be at the company anymore. The secret expires. Something breaks. The portal doesn't make this easy to audit either. You can view credentials on a per-app basis, but there's no native view that shows you all secrets and certificates across all app registrations sorted by expiry date. You'd have to click into every single app manually. In a tenant with dozens or hundreds of ap