Generate a new client secret for SharePoint Template

Make sure you have the latest Microsoft Graph PowerShell modules loaded.

1. (Optional) Uninstall Old modules

Remove any outdated or conflicting Microsoft Graph modules:

Get-InstalledModule Microsoft.Graph* | Uninstall-Module -Force

2. Install the Latest Microsoft Graph SDK

Reinstall the latest version of the Microsoft Graph PowerShell SDK:

Install-Module Microsoft.Graph -Scope CurrentUser -Force -AllowClobber

3. Import the Module

Ensure the module is loaded:

Import-Module Microsoft.Graph

4. Run script to generate and display a new Client Secret

This script template will generate a new Client Secret with a validity period of 2 years for the existing Application you should already have created in the past for your Ucc.Creator template site collection (legacy method).

Adapt the with your details, corporate security standards and naming conventions (TenandId, ClientId, Validity period, Displayname)

# Connect to Microsoft Graph with a specific tenant
$tenantId = 'your-tenant-id-here'
Connect-MgGraph -Scopes "Application.ReadWrite.All" -TenantId $tenantId

# Define the application ID
$appId = 'your-client-id-here'
$app = Get-MgServicePrincipalByAppId -AppId $appId

# Define the secret validity period
$dtStart = [System.DateTime]::Now
$dtEnd = $dtStart.AddYears(2)

# Create the password credential object
$passwordCred = @{
    displayName = "AnywhereNow-ClientSecret-2025"
    startDateTime = $dtStart
    endDateTime = $dtEnd
}

# Add the new client secret and capture the output
$secret = Add-MgServicePrincipalPassword -ServicePrincipalId $app.id -PasswordCredential $passwordCred

# Output the secret value (Store this securely! This can be displayed only once!)
$secret.secretText

Store the new ClientSecret in a safe place. It can be displayed only once.

A client secret (just as a password or a certificate) expires over time. Before it expires a new client secret must be in place before the current one expires to ensure continued operation of your application. Microsoft recommends to create new secrets a minimum of 30 days before they expire. Learn More - Microsoft

Prerequisites

Make sure the following prerequisites are met

1. User is SharePoint Online global administrators and tenant administrator for the Microsoft 365 tenant

2. Install SharePoint Online Management Shell

   https://www.microsoft.com/en-us/download/details.aspx?id=35588

3. Install PowerShell PowerShellGet

   1. Open PowerShell as administrator

   2. Run:

      Copy

      PowerShell

      Install-Module –Name PowerShellGet –Force
      Update-Module -Name PowerShellGet

4. Install "Microsoft Online Services"

   1. Open PowerShell as administrator

   2. Run:

      Copy

      PowerShell

      Install-Module -Name MSOnline

Generate

1. Run Powershell as administrator

2. Run the following cmdlets: (Change the client id value to your client id)

   Copy

   PowerShell

   Connect-MsolService
   $clientId = 'clientid'
   $bytes = New-Object Byte[] 32
   $rand = [System.Security.Cryptography.RandomNumberGenerator]::Create()
   $rand.GetBytes($bytes)
   $rand.Dispose()
   $newClientSecret = [System.Convert]::ToBase64String($bytes)
   New-MsolServicePrincipalCredential -AppPrincipalId $clientId -Type Symmetric -Usage Sign -Value $newClientSecret
   New-MsolServicePrincipalCredential -AppPrincipalId $clientId -Type Symmetric -Usage Verify -Value $newClientSecret
   New-MsolServicePrincipalCredential -AppPrincipalId $clientId -Type Password -Usage Verify -Value $newClientSecret
   $newClientSecret

3. Copy outcome and save it

(Optional) Extend expiration date to 3 years

Replace the "New-MsolServicePrincipalCredential” statements from the previous code with:

$dtStart = [System.DateTime]::Now
$dtEnd = $dtStart.AddYears(3)
New-MsolServicePrincipalCredential -AppPrincipalId $clientId -Type Symmetric -Usage Sign -Value $newClientSecret -StartDate $dtStart -EndDate $dtEnd
New-MsolServicePrincipalCredential -AppPrincipalId $clientId -Type Symmetric -Usage Verify -Value $newClientSecret -StartDate $dtStart -EndDate $dtEnd
New-MsolServicePrincipalCredential -AppPrincipalId $clientId -Type Password -Usage Verify -Value $newClientSecret -StartDate $dtStart -EndDate $dtEnd

Once your new Client ID and Secret are created there are several places these may need to be applied.

1. If you expect to, or regularly do add new UCC sites (from one of your own local SharePoint administrator Windows machines) to your SharePoint, you will need to set AppSecret to the new Client Secret in the configuration.xml file of your UCC.Creator script to build these sites.

2. If you want to update your Site Collection and Sites to a newer template version (from one of your own local SharePoint administrator Windows machines) of UCC.Creator, you will need to use the new Client Secret in the configuration.xml file of your UCC.Creator script to update your sites. See: Update UCC Creator

3. If you have running UCC's you will need to contact your AnywhereNow representative or official partner in advance to have the client secret changed at a scheduled time. (Or contact AnywhereNow support and submit a P4 case because it can be planned, to request this change) to have the Client secret changed in a service window. A UCC service restart is not required for this change.

4. If you have Snapper(s) running in your organization which have been configured for screenrecording and writing the recording to a SharePoint online (Ucc) site then ALL those Snapper configurations will need to be updated with the new Client Secret for ScreenRecording storage location. Learn More

5. If a Dialogue Studio flow connects to a SharePoint online site using Client ID and Client Secret, the Client Secret will need to be replaced in the Dialogue Studio flow.