Rotate or revoke credentials
Replace a client secret without downtime, or end an integration's access at once.
Rotate the credentials
Rotate when you lose a secret, when someone who knew it leaves, or on your regular schedule.
- On the Integrations tab, find the integration and click Rotate secret.
- Confirm, then copy the new client ID and client secret.
- Deploy the new values to your server.
- Check that your server gets a token with the new values.
The old credentials keep working for a grace period so you can switch over. The default is 24 hours. After that, the old credentials and any token issued from them are refused.
If the old secret leaked, don't wait for the grace period: revoke the integration and create a new one.
Revoke an integration
- On the Integrations tab, find the integration and click Revoke.
- Confirm.
Its credentials and tokens stop working immediately. You can't undo this. MyTPE keeps the audit history of the integration.
Postman collection