Azure AD Logins Failing with Error "AADSTS7000222: The provided client secret keys are expired"

Last Updated: Sep 10, 2025

Overview

We suddenly started seeing failed logins for our Azure AD enterprise connection. When inspecting the log entry, you can see that the error description states the following:

AADSTS7000222: The provided client secret keys for app '******************' are expired. Visit the Azure portal to create new keys for your app: https://aka.ms/NewClientSecret, or consider using certificate credentials for added security: https://aka.ms/certCreds.

Applies To

Azure AD
App Login

Cause

This error indicates that the failure is occurring on the Azure side and that the client secret keys generated within the Azure portal have expired.

Solution

The Microsoft developer forums has a post that outlines some steps you can take to renew the client secret keys and update your application:

AADSTS7000222: The provided client secret keys are expired