Merge pull request #285867 from meaghanlewis/refresh-remote-connection-keys

Add refresh remote connection keys article

Author: v-shils

articles/modeling-simulation-workbench/media/refresh-remote-connection-keys/auth-url.png

@@ -0,0 +1,39 @@
+---
+title: Refresh remote connection keys in Azure Modeling and Simulation Workbench
+description: Learn how to refresh remote connection keys in Azure Modeling and Simulation Workbench.
+author: meaghanlewis
+ms.author: mosagie
+ms.service: modeling-simulation-workbench
+ms.topic: how-to
+ms.date: 09/05/2024
+# Customer intent: As a Chamber User in Azure Modeling and Simulation Workbench, I want to refresh remote connection keys.
+---
+
+# Refresh remote connection keys
+
+The Modeling and Simulation Workbench offers provisioned users secure remote connectivity to all chamber workloads. To set up remote access, register a new application in Microsoft Entra ID and add a client secret as described in [Create an Azure Modeling and Simulation Workbench](/azure/modeling-simulation-workbench/quickstart-create-portal#add-a-client-secret). Registering your application establishes a trust relationship between the Modeling and Simulation Workbench remote desktop authentication and the Microsoft identity platform. Creating a client secret allows the Modeling and Simulation Workbench to redirect Microsoft Entra sign-in requests directly to your organization's Microsoft Entra ID and enables a single sign-on experience for onboarded users. 
+
+## Client secret lifetime
+
+The client secret lifetime is typically set to 12 months. If the workbench’s lifetime extends beyond the secret’s lifespan, the app secrets will expire resulting in users losing access to the chambers. Expired client secrets disrupt remote authentication, causing a blue screen.
+
+To address an expired client secret, you need to create a new secret by following steps outlined in [Create an application in Microsoft Entra ID](/azure/modeling-simulation-workbench/quickstart-create-portal#create-an-application-in-microsoft-entra-id). After creating a new secret, you need to update the Modeling and Simulation Workbench with that new client secret URL. 
+
+## Update the client secret URL
+
+On the Azure portal workbench resource page, you can update the authentication URLs for the new client secrets linked to the original app registration.
+
+1. In the Azure portal, navigate to the Modeling and Simulation Workbenches (preview) page.
+
+1. Select **Auth URL**.
+
+    ![Screenshot of the Azure portal pane where the authentication URL can be updated.](./media/refresh-remote-connection-keys/auth-url.png)
+
+1. Enter in the new client secret URL.
+
+    ![Screenshot of the Azure portal pane where a new client secret URL can be entered.](./media/refresh-remote-connection-keys/client-secret-url.png)
+
+These actions can only be performed by the Workbench Owner, and allow rotation of Client ID/secrets on deployed workbenches prior to expiration, which ensures business continuity for the engineering team.
+
+> [!NOTE]
+> Please restart the connector before attempting to make a remote connection with the updated authentication URLs

articles/modeling-simulation-workbench/media/refresh-remote-connection-keys/client-secret-url.png

@@ -63,6 +63,8 @@ items:
         href: ./how-to-guide-register-resource-provider.md
       - name: Create a chamber
         href: ./how-to-guide-chamber.md
+      - name: Refresh remote connection keys
+        href: ./refresh-remote-connection-keys.md
   - name: Resources
     items:
       - name: Troubleshoot