AADSTS7000222: The provided client secret keys are expired

Check the error code here:

https://learn.microsoft.com/en-us/azure/active-directory/develop/reference-aadsts-error-codes

AADSTS7000222: InvalidClientSecretExpiredKeysProvided - The provided client secret keys are expired. Visit the Azure portal to create new keys for your app, or consider using certificate credentials for added security: https://aka.ms/certCreds

Assuming you got the error from pipeline during deployment. Check the service connection you use and update the key or create a new service connection.

---

How to find the "service connection" / "app registration" and create a new client secret

editor's (toraritte) note: The linked documentation does provide the answer, but it assumes everyone knows their way around the Azure portal. In my case, the initial credentials were created using Azure CLI on the terminal with reference to a key vault (didn't even know it will register the security principal as an app), so I spent an hour to find the relevant menus there...

1. Go to the Azure portal

2. Go to the search bar at the top and look for "app registration"

3. On the "App registrations" page, choose the one that needs to be updated (there will probably be an "expired" tag next to it).

4. Go to "Certificates & secrets"

5. Click on "New client secret"

You can leave the old one there, if you'd like, it doesn't seem to interfere with anything.