{
  "id": "azure_entra_client_secret",
  "kind": "datatype",
  "status": "draft",
  "name": "Microsoft Entra ID client secret",
  "doc": "Client secret of a Microsoft Entra ID (Azure AD) application registration, used by a service principal to obtain tokens. Microsoft Purview describes the secret as up to 40 letters, digits and the characters - _ . ~. Secrets generated in the current format carry the marker Q~ after four characters; the regexp follows the gitleaks rule for this format and does not match older secrets.",
  "parent": "api_key",
  "is_pii": false,
  "categories": [
    "secrets"
  ],
  "langs": [
    "common"
  ],
  "classification": "identifier",
  "regexp": "^[A-Za-z0-9_~.]{3}[0-9]Q~[A-Za-z0-9_~.-]{31,34}$",
  "examples": [
    {
      "value": "Bb2Cc~3Dd4.-Ee5Ff6Gg7Hh8Ii9Jj0_Kk1Ll2Mm3",
      "description": "Pattern example from the Purview definition, without the Q~ marker",
      "valid": false
    }
  ],
  "mappings": {
    "purview": [
      "Microsoft Entra client secret",
      "Azure AD client secret"
    ]
  },
  "links": [
    {
      "type": "doc",
      "url": "https://learn.microsoft.com/en-us/purview/sit-defn-azure-ad-client-secret"
    },
    {
      "type": "other",
      "url": "https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml"
    }
  ],
  "detected_by": {
    "tools": [
      "cloudflaredlp",
      "datadogsds",
      "gitguardian",
      "githubsecretscanning",
      "gitleaks",
      "microsoftpurview"
    ]
  },
  "quality": {
    "score": 80,
    "missing": [
      "examples",
      "translation"
    ]
  },
  "source": {
    "path": "data/datatypes/any/secrets/azure_entra_client_secret.yaml",
    "url": "https://github.com/apicrafter/metacrafter-registry/blob/main/data/datatypes/any/secrets/azure_entra_client_secret.yaml",
    "edit_url": "https://github.com/apicrafter/metacrafter-registry/edit/main/data/datatypes/any/secrets/azure_entra_client_secret.yaml"
  },
  "urls": {
    "html": "https://registry.apicrafter.io/datatype/azure_entra_client_secret",
    "json": "https://registry.apicrafter.io/api/v1/datatypes/azure_entra_client_secret.json"
  }
}