Retrieve Azure App Credential Expiration Dates for Secure Access

[JeanBlanc]

Hi community,

Has anyone succeeded in pulling the expiration dates of Azure App Credentials (client-secret / certificate) directly into Dynatrace?

I’m not referring to secrets stored in Azure Key Vault (those are already covered by the Key Vault integration). I need to surface the expiry information that Azure exposes under:

Azure AD ➡ App registrations ➡ Certificates & secrets

Context

• Dynatrace SaaS, ActiveGate 1.313

• Azure Monitor integration already enabled

What I’ve tried

1. Azure Monitor Metrics/Logs – couldn’t find any metric or table that exposes credential expiry.

2. Dynatrace Extensions 2.0 – checked available extension libraries; none seem to target applications endpoints.

3. Custom API pull – considered building an Extension 2.0 that calls
   GET https://graph.microsoft.com/v1.0/applications/{id}?$select=id,displayName,passwordCredentials
   …but before investing time I’d like to know if there’s an existing solution or best practice.

Questions

1. Did you manage to ingest this data into Dynatrace (metric, log, or event)?

2. If so, which approach worked best (builtin integration, Extension 1.0/2.0, Synthetic Monitor)?

3. Any pitfalls around token scopes, rate limits, or schema mapping I should watch out for?

Thanks in advance for any insights or code snippets!

Best,

[IzabelaRokita]

Hey @JeanBlanc ,
I just wanted to check in and see if you still need help with this. If so, I’d be happy to look into it for you! 😊
Please let me know what works best for you.

[JeanBlanc · Accepted solution]

Hi @IzabelaRokita,

Thanks for checking back 😊
Yes — I can confirm that I’ve already implemented a fully functional solution for this use case.

What I ended up doing

I built an export based on Microsoft Graph to pull App Registration credential expiry (client secrets + certificates) and bring it into Dynatrace in a way that supports dashboards and alerting for customers.

So overall: solution is already in production, and my customers are using it today to monitor expiration dates and get proactive alerts.

Best,