EntraCredentialExpiry

0.2.0

Reminds you before Entra (Azure AD) app registration and enterprise application credentials (client secrets and certificates) expire. Entra does not email you about client secret expiry; this reads the credentials via Microsoft Graph, buckets them by your own expiry windows, and (optionally) sends a Teams card or email. Read-only. Built for scheduled, unattended runs
Reminds you before Entra (Azure AD) app registration and enterprise application credentials (client secrets and certificates) expire. Entra does not email you about client secret expiry; this reads the credentials via Microsoft Graph, buckets them by your own expiry windows, and (optionally) sends a Teams card or email. Read-only. Built for scheduled, unattended runs (Azure Automation, Azure Functions, GitHub Actions).
Show more

Minimum PowerShell version

7.2

Installation Options

Copy and Paste the following command to install this package using PowerShellGet More Info

Install-Module -Name EntraCredentialExpiry

Copy and Paste the following command to install this package using Microsoft.PowerShell.PSResourceGet More Info

Install-PSResource -Name EntraCredentialExpiry

You can deploy this package directly to Azure Automation. Note that deploying packages with dependencies will deploy all the dependencies to Azure Automation. Learn More

Manually download the .nupkg file to your system's default download location. Note that the file won't be unpacked, and won't include any dependencies. Learn More

Owners

Copyright

(c) Vijay Kumar G. MIT License.

Package Details

Author(s)

  • Vijay Kumar G

Tags

Entra AzureAD Microsoft365 Graph Security Governance Secrets Certificates Expiry AppRegistration

Functions

Get-EntraCredentialExpiry Send-EntraCredentialExpiryAlert

Dependencies

Release Notes

v0.2.0 - Production hardening: automatic retry on Graph throttling (429) and transient 5xx with Retry-After honoured; robust UTC date normalisation; per-channel isolation in Send-EntraCredentialExpiryAlert (one channel failing no longer blocks the other, and the cmdlet throws on any delivery failure so scheduled hosts record it); -WhatIf/-Confirm support; PortalUrl added to CSV. v0.1.0 - Get-EntraCredentialExpiry (app registrations + enterprise apps, secrets + certificates, tiered windows, console/CSV/HTML) and Send-EntraCredentialExpiryAlert (Teams card + email). App-only Graph, read-only.

FileList

Version History

Version Downloads Last updated
0.2.0 (current version) 5 10/14/2026