Microsoft Entra ID
Microsoft Entra client secret is invalid
AADSTS7000215: Invalid client secret is provided.
Microsoft Entra ID rejected the confidential-client request because the provided client secret is wrong, expired, or the wrong secret value was used.
Observed message
AADSTS7000215: Invalid client secret is provided.
Why it happens
- The app is sending the wrong client secret value.
- The secret has expired or was rotated and the app still uses the old value.
- The application uses a client secret in a scenario that should not use one.
How to fix it
- Confirm that the application is sending the client secret value rather than the secret identifier.
- Rotate the secret if it has expired and update the application configuration.
- Verify that the app registration and authentication flow match a confidential-client scenario.
