SKY Developer Adds Support for a Secondary Application Secret (OAuth Client Secret)

Lindsey Rix

We added support for a secondary application secret.

From My applications, select an application to navigate to the application details page. You should now see both a primary and a secondary application secret.

With the addition of a secondary application secret, we now encourage all applications to adopt a credential rotation. To support security best practices, Blackbaud SKY Developer recommends you change your application secret (OAuth client secret) on a regular schedule, such as every 90 days. For more information, see the new credential rotation help.

To regenerate the secret, next to the primary or secondary application secret select Regenerate. Before you regenerate a secret, verify your application code is using the other application secret. Then, be sure to store the new secret securely.