SecurityInsight settings · Settings > Advanced / diagnostics
Client secret (launcher name)
| Key | SpnClientSecret |
|---|---|
| Where | Settings > Advanced / diagnostics |
| Type | Text |
| Default | Copied from SI_SPN_Secret; not set means no secret sign-in |
| Edition | Community |
What it does
Plain client secret the launchers sign in with when no managed identity, Key Vault secret or certificate is configured.
When set
Enables plain-secret sign-in, which the launcher warns is for testing only. Storing a secret in a file is a security risk.
When blank or default
Left blank, the default applies: Copied from SI_SPN_Secret; not set means no secret sign-in
Risk and how to reverse it
A credential: kept only in the install's Key Vault, never shown again after it is saved. A wrong value stops the steps that use it until it is corrected; nothing else is changed.
Requires
Kept in the install's Key Vault. Read by: asset-trend, azure, endpoint, identity, privilege-tier-classifier, publicip, risk-analysis.
Recommended
Keep the default. Change it when: Only in labs; prefer managed identity, a certificate or a Key Vault secret.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack