Reminds you before Entra (Azure AD) app registration and enterprise application credentials (client secrets and certificates) expire. Entra does not email you about client secret expiry; this reads the credentials via Microsoft Graph, buckets them by your own expiry windows, and (optionally) sends a Teams card or email. Read-only. Built for scheduled, unattended runs
Reminds you before Entra (Azure AD) app registration and enterprise application credentials (client secrets and certificates) expire. Entra does not email you about client secret expiry; this reads the credentials via Microsoft Graph, buckets them by your own expiry windows, and (optionally) sends a Teams card or email. Read-only. Built for scheduled, unattended runs (Azure Automation, Azure Functions, GitHub Actions).
Copy and Paste the following command to install this package using PowerShellGet More Info
Install-Module -Name EntraCredentialExpiry
Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info
Install-PSResource -Name EntraCredentialExpiry
You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More
Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More
v0.2.0 - Production hardening: automatic retry on Graph throttling (429) and transient 5xx with Retry-After honoured; robust UTC date normalisation; per-channel isolation in Send-EntraCredentialExpiryAlert (one channel failing no longer blocks the other, and the cmdlet throws on any delivery failure so scheduled hosts record it); -WhatIf/-Confirm support; PortalUrl added to CSV. v0.1.0 - Get-EntraCredentialExpiry (app registrations + enterprise apps, secrets + certificates, tiered windows, console/CSV/HTML) and Send-EntraCredentialExpiryAlert (Teams card + email). App-only Graph, read-only.