Skip to content

Commit 3d81016

Browse files
Add title and summary
1 parent 82771cb commit 3d81016

File tree

2 files changed

+8
-6
lines changed

2 files changed

+8
-6
lines changed

release-notes/2025/includes/general/sprint-261-update.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,8 @@ ms.date: 09/04/2025
66
ms.topic: include
77
---
88

9-
### OAuth Client Secrets Now Shown Only Once
9+
### OAuth client secrets now shown only once
1010

11-
As part of our ongoing commitment to security and industry best practices, Azure DevOps will now be enforcing one-time visibility for OAuth client secrets. Starting with this release, newly generated client secrets will be displayed only once at the time of creation and will no longer be retrievable via the UI or API. This change includes the retirement of the Get Registration Secret API. Users are encouraged to securely store secrets immediately upon generation using tools such as Azure Key Vault. For secret rotation, Azure DevOps supports overlapping secrets to ensure continuity and minimize downtime. This update will go into effect starting September 2, 2025. Learn more in our [blog post](https://devblogs.microsoft.com/devops/azure-devops-oauth-client-secrets-now-shown-only-once/).
11+
As part of our ongoing commitment to security and industry best practices, Azure DevOps will now be enforcing one-time visibility for OAuth client secrets. Starting with this release, newly generated client secrets will be displayed only once at the time of creation and will no longer be retrievable via the UI or API.
12+
13+
This change includes the retirement of the Get Registration Secret API. Users are encouraged to securely store secrets immediately upon generation using tools such as Azure Key Vault. For secret rotation, Azure DevOps supports overlapping secrets to ensure continuity and minimize downtime. This update will go into effect starting September 2, 2025. Learn more in our [blog post](https://devblogs.microsoft.com/devops/azure-devops-oauth-client-secrets-now-shown-only-once/).

release-notes/2025/sprint-261-update.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
---
2-
title: TBD
2+
title: Newly generated OAuth client secrets will be shown only at time of creation
33
author: gloridelmorales
44
ms.author: glmorale
55
ms.technology: devops-release-notes
66
ms.date: 09/04/2025
7-
description: Placeholder
7+
description: Newly generated OAuth client secrets will be shown only at time of creation
88
---
99

10-
# Azure Boards and Azure Pipelines integration with GitHub Enterprise Cloud
10+
# Newly generated OAuth client secrets will be shown only at time of creation
1111

12-
Placeholder
12+
With this release we are changing how Azure DevOps displays OAuth client secrets. Now, newly generated client secrets will be shown only once at the time of creation. This means that they will no longer be retrievable the UI or API. This change will reduce the risk of accidental exposure and encourages secure storage practices.
1313

1414
Check out the release notes for details.
1515

0 commit comments

Comments
 (0)