Monitor four Entra credential types
AppAlert tracks expiry dates for client secrets, application certificates, SAML signing certificates and Application Proxy SSL certificates in Microsoft Entra.
Client secrets on Entra app registrations can stop workloads from authenticating when they expire.
Certificates on Entra app registrations can stop certificate-based client authentication when they expire.
SAML signing certificates on Entra enterprise applications can break sign-in if the receiving application rejects an expired certificate.
SSL certificates in Entra Application Proxy settings for custom domains can interrupt external HTTPS access when they expire.
Follow the renewal guide for client secrets, application certificates, SAML signing certificates or Application Proxy SSL certificates. Test the replacement before retiring the old credential.
AppAlert reads credential types, expiry dates, application and enterprise application identifiers and names, owner email addresses, and Application Proxy certificate metadata. It never receives raw secret values or private keys.
The Microsoft Entra Connect Sync authentication certificate is an application certificate that AppAlert monitors for expiry. Check its renewal guide, then see how email alerts work.
Put all four credential types in the same queue.
Connect your organization and replace separate expiry reports with one ordered list.