SecurityInsight settings · Settings > Sign-in & Azure resources
Service principal client secret
| Key | SI_SPN_Secret |
|---|---|
| Where | Settings > Sign-in & Azure resources > How SecurityInsight signs in |
| Type | Text |
| Default | Not set: certificate or managed identity is used |
| Edition | Community |
What it does
Client secret of the service principal when the sign-in method is Secret.
When set
Enables secret-based sign-in. If a certificate thumbprint is also set, the certificate wins and the secret is ignored. Secrets expire and must be rotated.
When blank or default
Left blank, the default applies: Not set: certificate or managed identity is used
Risk and how to reverse it
A credential: kept only in the install's Key Vault, never shown again after it is saved. A wrong value stops the steps that use it until it is corrected; nothing else is changed.
Requires
Kept in the install's Key Vault.
Recommended
Keep the default. Change it when: Only when you cannot use managed identity or a certificate; rotate via your Key Vault procedure.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack