Important: Existing Traverse installations that have been configured with single sign-on will need to be updated before the current client secret expires. If you do not know your secret expiration date contact your organization's IT administrator.
Before you begin
Use a domain account with permission to create and configure application registrations in your Microsoft Entra ID tenant.
Confirm your organization’s approved method for securely transmitting a client secret to Northwoods.
Confirm your organization's method for storing client secret expiration information for future reference.
The process for rotating the Single Sign-On secret is as follows.
Rotating Single Sign-On Secrets for Existing Installations
Follow these steps to update your client secret and then provide the information to Northwoods prior to your Traverse application client secret expiring.
Sign in to the Microsoft Entra admin center.
Select Microsoft Entra ID, select App registrations and find the Traverse application your organization previously created and select it. It may be named NorthwoodsTraverseSingleSignOn
Go to the Certificates and Secrets page and then Client Secrets
Do not delete the previous Client Secret. You will delete that at a later step.
Click +New client secret.
Enter a Description and select an Expiration period that complies with your organization's client secret policy.
In the Client secrets section copy the Value of the new secret, you will provide this to Northwoods at a later step.
Document the Secret Expiration Date in an internal system to be reminded when the secret expires and will need renewed.
Provide the following information to Northwoods using a secure communications channel.
Client Secret value
Expiration Date value
Important: If you do not have a secure communications channel established please contact the Northwoods Support Center using the Customer Portal or 833-323-2637. Do NOT send the information through unencrypted email.
After Northwoods receives the Client Secret value and Expiration Date we will update the Traverse settings and follow up with your organization to test authentication.
After confirming successful authentication, return to the Microsoft Entra admin center, App registrations, <your app registration>, Certificates and Secrets page, then Client Secrets and delete the previous Secret.