{
  "id": "azure_entra_client_secret",
  "name": "Microsoft Entra ID client secret",
  "status": "draft",
  "doc": "Client secret of a Microsoft Entra ID (Azure AD) application registration, used by a service principal to obtain tokens. Microsoft Purview describes the secret as up to 40 letters, digits and the characters - _ . ~. Secrets generated in the current format carry the marker Q~ after four characters; the regexp follows the gitleaks rule for this format and does not match older secrets.",
  "parent": {
    "type": "api_key"
  },
  "categories": [
    {
      "id": "secrets",
      "name": "Secrets and credentials (passwords, keys, tokens)"
    }
  ],
  "langs": [
    {
      "id": "common",
      "name": "Common to most languages"
    }
  ],
  "is_pii": false,
  "classification": "identifier",
  "regexp": "^[A-Za-z0-9_~.]{3}[0-9]Q~[A-Za-z0-9_~.-]{31,34}$",
  "examples": [
    {
      "value": "Bb2Cc~3Dd4.-Ee5Ff6Gg7Hh8Ii9Jj0_Kk1Ll2Mm3",
      "valid": false,
      "description": "Pattern example from the Purview definition, without the Q~ marker"
    }
  ],
  "mappings": {
    "purview": [
      "Microsoft Entra client secret",
      "Azure AD client secret"
    ]
  },
  "links": [
    {
      "type": "doc",
      "url": "https://learn.microsoft.com/en-us/purview/sit-defn-azure-ad-client-secret"
    },
    {
      "type": "other",
      "url": "https://github.com/gitleaks/gitleaks/blob/master/config/gitleaks.toml"
    }
  ],
  "type": "datatype",
  "translations": {}
}