Online Help

How to renew an App registration

This guide shows you how to renew an App registration before it expires, or how to recover from an expiration that has already happened.

AlloyScan starts emitting expiration notifications 30 days before the Expiration date, again at 7 days, and once more on the day the registration expires. Plan to renew during the 30-day window so that your service-to-service callers never experience an outage.

Prerequisites

  • You are signed in as a Site Administrator.
  • You know which registration is approaching expiry. Open Admin Center > Site Settings > IAM > App registrations and look for rows where Expires shows a small number of days, or check the Administrative notification log.

Renew before expiry

  1. Navigate to Admin Center > Site Settings > IAM > App registrations.
  2. Open the registration row that is expiring.
  3. Update the Expiration date to a future date that fits your rotation policy.
  4. Save.

The registration stays valid; the existing Client ID and Client secret continue to work. No update is needed on the consumer side.

Recover an expired registration

After the Expiration date has passed, AlloyScan shows a persistent rose-pink API client alert banner on every page (one banner per expired registration). Token requests with the affected Client ID fail.

You have two recovery paths:

  • Extend the lifetime. If the secret is still safely stored on the consumer side, open the registration and push the Expiration date forward. The registration goes back to Active and the banner disappears.
  • Replace the registration. If the secret has been rotated or lost, delete the expired registration and create a new one. Distribute the new Client ID and Client secret to the consumer. See How to create an App registration.

Important: Extending the Expiration date does not regenerate the Client secret. If the consumer no longer has the secret, replacement is the only path.

Verify

After saving an extended Expiration date:

  • The Expires column on the App registrations grid no longer shows Expired. It returns to In N days.
  • The persistent API client alert banner for this registration is removed on the next page load.
  • The next token request from the consumer succeeds.