Resetting the Client Secret Expiration Date

Overview

This article describes the cause of and resolution for data retrieval errors that may appear within the Integrity Data HR portal. When this error is encountered, users are unable to view one or more of the following: Time Off Balances, Pay History, and/or W2’s.

Error Message

Root Cause

The most common cause of this error is an expired Client Secret in the Microsoft Dynamics 365 Business Central Azure App Registration. Integrity Data’s HR portal authenticates with your Business Central environment using a Microsoft Entra ID (formerly Azure Active Directory) app registration. This app registration includes a Client Secret that has a defined expiration date.

When the Client Secret expires, the integration can no longer authenticate with Business Central, causing all API calls to fail silently, resulting in the error shown above.

Other Possible Causes

• Incorrect or missing Client Secret value in the integration configuration
• App registration permissions were modified or revoked in Azure
• Business Central environment URL or tenant ID has changed
• Azure subscription or tenant was migrated

Resolution: Update the Client Secret Expiry Date

Follow the steps below to generate a new Client Secret in Azure and send the updated value securely to Integrity Data Support.

Part 1: Locate the App Registration in Azure

1. Sign in to the Azure Portal at https://portal.azure.com using your administrator credentials.
2. In the Azure Portal search bar at the top, type Microsoft Entra ID and select it from the results (formerly called Azure Active Directory).
3. Click App registrations in the left pane.
4. Search for the app registration associated with your Integrity Data / Business Central integration. This may be named something like “Integrity Data BC Integration” or similar.
5. Click the app registration name to open its details.

Part 2: Generate a New Client Secret

6. In the app registration, select Certificates & secrets from the left menu.
7. Under the Client secrets tab, review the list of existing secrets. Identify any that are Expired or about to expire.
8. Click + New client secret.
9. Enter a description (e.g., “Integrity Data Integration – Renewed [Month Year]”).
10. Set the Expires field. It is recommended to select 24 months to reduce the frequency of renewals.
11. Click Add.
12. IMPORTANT: Immediately copy the new secret Value shown on screen. This value will only be displayed once and cannot be retrieved later.

Part 3: Version 28.51.1.30 and higher –  Update the Client Secret in PayrollNow

Enter the secret value from Part 2 above into the Entra Client Credentials Window in Payroll Now

1. Use the looking glass to search for the Entra Client Credentials window
2. Enter your company client ID. This can be located on the Payroll Now Setup Window in the Polling Parameters section:
3. Input the client secret obtained in Part 2 along with the new expiration date.

Part 4: Version 28.51.0.28 or lower – Send the New Client Secret to Integrity Data via Secure Email

The Client Secret is a sensitive credential. It must not be sent via standard email or shared in plain text. Use the following steps to transmit it securely.

1. Open your email client and compose a new message to Integrity Data Support at: support@integrity-data.com

2. Use the subject line: Business Central Client Secret – [Your Company Name] – ACTION REQUIRED
3. In the email body, include the following information:

• Your company name and Business Central environment name/URL
• The Azure App Registration name and Application (Client) ID
• The new Client Secret expiration date

4. Encrypt the Client Secret value before sending. Use one of the following recommended methods:

• Preferred: Use a secure file-sharing tool such as SharePoint, OneDrive (with password-protected sharing), or a service like 1Password Secure Share or Bitwarden Send.
• Alternative: Send via Microsoft 365 encrypted email (select Encrypt before sending in Outlook).
• Do NOT: Paste the raw secret directly in an unencrypted email body or in a Teams/Slack message.

5. Integrity Data Support will acknowledge receipt and update the configuration in your environment within one business day.

Verification

Once Integrity Data confirms the new secret has been applied, verify that the issue is resolved:

6. Log in to the Integrity Data HR portal.
7. Navigate to an employee record and open the Time Off section.
8. Confirm that Time Off Balance data loads successfully without error.
9. If the error persists, contact Integrity Data Support and reference this article.

Prevention: Proactive Secret Renewal

To avoid future disruptions, establish a process for monitoring Client Secret expiration dates:

• Set a calendar reminder 14 days before the Client Secret expiration date to initiate the renewal process early.
• In Azure Portal, navigate to App registrations > your app > Certificates & secrets to check expiration dates at any time.
• Consider navigating to the Microsoft Entra admin center > Entra ID > Overview > Recommendations to view and act on expiring credential alerts. This surfaces expiring secrets directly with guided remediation steps.
• When renewing, always allow 1–2 business days for Integrity Data to update the configuration before the old secret expires.

© 2026