Prerequisites

1. You have administrative privileges to register new apps in your Azure Active Directory.

Steps

Checking existing secret expiration

Follow the link below to view app registrations for sFiles. 
https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/RegisteredApps

• Click on "All Applications"
• Click on the sFiles app registration that corresponds to your production environment
• Copy the Object ID for later use
• On the left, click on "Certificates and secrets"
• Check to see if the active sFiles secret value is expired.

If the secret is expired, your users cannot use the sFiles integration at this time.  If the certificate is not expired, you can provide a smooth transition for your users.

Creating a new secret

This can be done in two ways. sFiles recommends that you use Windows PowerShell to reissue your certificate as outlined below so that you can specify an extended expiration date. If you wish to instead update through the Azure UI, follow the "Generate Secret" process -> Register sFiles App with Azure Active Directory

• As an Active Directory Administrator or Application Administrator, run PowerShell on a Windows device.
• Ensure that you have installed "AzureAD" (Install-Module AzureAD)
• Type Connect-AzureAD
• Use your credentials to authenticate with the directory
• Type the following commands, one line at a time:
  • $startDate = Get-Date
  • $endDate = $startDate.AddYears(30)
  • New-AzureADApplicationPasswordCredential -ObjectId [The Object ID from earlier] -StartDate $startDate -EndDate $endDate -CustomKeyIdentifier sFilesSecret
• IMPORTANT: You should be presented with a few values.  Copy the "Value"
  • When configuring sFiles, you need to use the secret value and NOT the secret ID. The secret value is only accessible when the client secret is created.

Update the Client Secret Value

• Go to Salesforce Setup > Identity > Auth. Providers
• Click "Edit" next to sFilesProvider
• In the Consumer Secret field replace the old Client Secret with the new value and save.

As soon as this is completed, you will be able to authenticate using the new secret.