Prerequisites

• You must be an Entra ID administrator or have permission to manage App registrations
• You must be a Maptician administrator with access to Environment Settings
• You should already have an existing Microsoft Graph API connection configured in Maptician

Maptician uses a Microsoft Graph API connection to support Microsoft 365 and Azure integrations. This connection relies on a Client Secret created in Microsoft Entra ID (formerly Azure Active Directory).

Client Secrets expire periodically. When a secret expires (or is about to expire), you must:

1. Create a new Client Secret in Entra ID
2. Update the existing Microsoft Graph API connection in Maptician
3. Verify the connection in Maptician
4. Remove the old Client Secret from Entra ID

This article, along with the video below, walks you through the process of renewing your Microsoft Graph API Connection in Maptician.

Step 1: Create a New Client Secret in Microsoft Entra ID

1. Sign in to the Microsoft Entra admin center
2. Navigate to Applications → App registrations
3. Select the App Registration configured with your Maptician environment
4. In the left navigation, select Certificates & secrets
5. Under Client secrets, click New client secret
6. Configure the secret:
   • Description: A descriptive name, such as “Maptician Graph API Client Secret”.
   • Expires: Choose an appropriate expiration period. We recommend selecting 730 days (24 months).
7. Click Add
8. Immediately copy and save the Secret Value & Secret ID

IMPORTANT: The Secret Value is only shown once. If it is lost, a new secret must be created.

Step 2: Update the Microsoft Graph API Connection in Maptician

1. Log in to Maptician
2. Navigate to Settings → Environment → Microsoft Office 365 / Azure Connections
3. Select the existing Microsoft Graph API connection and click Update
4. Update the following fields:
   1. Secret ID → Paste the new Secret ID from Entra ID
   2. Secret Value → Paste the new Secret Value
   3. Secret Expiration (optional) - This field is for reference only and is not enforced by Maptician
5. Do not change the Application/Client ID or Tenant ID fields.
6. Click Update to save the connection

Step 3: Verify the Connection in Maptician

After updating the connection, confirm that it is working.

1. In Settings → Environment → Office 365 Integration → Microsoft Office 365 / Azure Connections, ensure the Microsoft Graph API connection is selected.
2. Click the CHECK button

Expected result

If the connection is successful, a confirmation dialog will appear indicating that the connection is working.

If verification fails

Re-check the following:

• The Secret ID and Secret Value were entered correctly
• The client secret has not expired
• The correct App Registration was used in Microsoft Entra ID

Step 4: Delete the Old Client Secret from Entra ID (Recommended)

Once the connection has been successfully confirmed in your Maptician environment, you should remove the old client secret from Microsoft Entra.

1. Return to the Microsoft Entra admin center
2. Navigate to Applications → App registrations
3. Select the App Registration configured with your Maptician environment
4. In the left navigation, select Certificates & secrets
5. Locate the old or expired Client Secret
6. Click Delete
7. Confirm the deletion

Removing unused or expired client secrets helps reduce security risk and ensures only active credentials remain associated with your application.