Azure: Client Secret Validation Failed For Client

When using Orchestrator in Azure as a service, an error occurs in the logs: Client secret validation failed for client: "abcdefg-123456"

If in the logs from azure the error below is seen:

2022-01-20 15:27:25.0734 - INFO - IdentityServer4.Events.DefaultEventService {"ClientId":"EXAMPLE-ID", "Category":"Authentication", "Name":"Client Authentication Failure", "EventType":"Failure", "Id":1011, "Message":"Invalid client secret", "ActivityId":"EXAMPLE", "TimeStamp":"2022-01-20T15:27:25Z", "ProcessId":EXAMPLE, "LocalIpAddress":"EXAMPLE:443", "RemoteIpAddress":"EXAMPLE"}

2022-01-20 15:27:25.0916 - ERROR - IdentityServer4.Validation.ClientSecretValidator Client secret validation failed for client: EXAMPLE-ID


It is required to verify the SQL database table and look in the identity.Clients table and see what is the client id of the above example-id (1).

Based on the client id here, check the table identity.ClientSecrets and check what is the value of the Client Secret (1) for the Client ID (2) encountering in the table above.

If the value in the table above is the same as the one in the azure (1) on the Orchestrator settings, the value in the table is not hashed and hash it by using the tool: https://cryptii.com/pipes/fpEyXg



Resolution:

Hash the Client secret from the database and replace.