SecurityInsight settings · Settings > Sign-in & Azure resources
Key Vault secret name
| Key | SpnSecretName |
|---|---|
| Where | Settings > Sign-in & Azure resources |
| Type | Text |
| Default | Not set: the secret is not read from Key Vault |
| Edition | Community |
What it does
Name of the Key Vault secret that holds the service principal's client secret.
When set
With a vault name and app id, the launchers fetch the client secret from Key Vault at each run, so no secret is stored on disk. A wrong name stops the run.
When blank or default
Left blank, the default applies: Not set: the secret is not read from Key Vault
Risk and how to reverse it
A credential: kept only in the install's Key Vault, never shown again after it is saved. A wrong value stops the steps that use it until it is corrected; nothing else is changed.
Requires
Kept in the install's Key Vault. Read by: asset-tagging, asset-trend, azure, endpoint, identity, privilege-tier-classifier, publicip, risk-analysis.
Recommended
Keep the default. Change it when: When the service principal secret is kept in Key Vault rather than using a certificate or managed identity.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack