Credential expiry guides

Where each credential shows its expiry date, what breaks when it lapses, and how to rotate it safely.

• How to find expiring Entra (Azure AD) client secrets
  List the client secrets and certificates on your Microsoft Entra app registrations with their expiry dates, then track the renewals with calendar reminders.
• Track expiring certificates on Entra app registrations
  Find certificates uploaded to Microsoft Entra app registrations, see when they expire, and set reminders so certificate-based authentication does not break.
• SAML signing certificate expiry: find it, renew it, avoid outages
  Where to find the SAML token signing certificate expiry date in Microsoft Entra and other identity providers, and how to rotate it without breaking single sign-on.
• Apple push notification (APNs) certificate expiry and renewal
  APNs provider certificates are valid for a year. How to check the date, renew before it lapses, and consider token-based authentication.
• Intune and Apple MDM push certificate expiry: renew it the right way
  The Apple MDM push certificate and Apple Business tokens expire after 365 days. How to find the dates and renew without breaking device management.
• Apple Business and volume-purchase tokens: expiry and renewal in Intune
  Apple enrollment program tokens and volume-purchase (Apps and Books) tokens expire after 365 days. How to track them and renew without invalidating the token your MDM uses.
• Apple signing certificates and provisioning profiles: expiry dates
  Where to see expiry dates for Apple development, distribution and Developer ID certificates and provisioning profiles, and how to renew without breaking releases.
• Code-signing certificate expiry: renewal lead times and timestamps
  How to track a code-signing certificate, why timestamping keeps old releases valid, and how much lead time renewal needs.
• Google Cloud service account keys: find and track their expiry
  List user-managed service account keys with the gcloud CLI, understand when they expire, and move to keyless authentication where possible.