Single Sign-On fails, renew expired Entra ID secret

If Q.wiki displays the login form instead of the enterprise login, and clicking Use enterprise login again only shows the login form, your Entra ID Secret has likely expired.

Set up a reminder

Beginning 04/2026, Q.wiki may now send a reminder mail to all Key Users for the expiry date of your secret token. To enable the reminder, you need to add one permission in your Entra ID App Registration.

1. Open the App Registrierung in Entra ID.

2. Go to API permissions auf

3. Add a new delegated permission for Microsoft Graph:

A new admin consent is required. Afterwards, Q.wiki will remind you 14 days prior to the token expiration.

Renew 

1. Create a new secret in Entra ID

1. Open Entra ID.
2. Go to the App registration for Q.wiki.
3. Navigate to Certificates & secrets.
4. Create a new client secret and copy its value.

2. Update the secret in Q.wiki

The new secret value must be updated by a Key User account that is not provisioned via Entra:

1. Go to User management.
2. Switch to the OpenID Connect tab.
3. Select your provider.

4. Replace the Client Secret with the value of the new token.
5. Click Save.

Result

Enterprise login now works again. Users can log in as usual.