> For the complete documentation index, see [llms.txt](https://docs.coherent.global/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.coherent.global/identity-and-access-management/client-credentials/modify-identity-provider-secret-in-keycloak.md).

# Modify identity provider secret in Keycloak

{% hint style="info" %}
Since this document was published, we have upgraded the version of Keycloak used with Spark. The steps below may be different after this upgrade.
{% endhint %}

## Prerequisites

Before proceeding with the setup, ensure that the following prerequisites are met:

1. An OpenID Connect provider is already configured in Keycloak
2. Obtained the new Client Secret for the Sign-in Application of your Identity Provider (e.g. MS Entra ID - formerly MS Azure AAD, Okta, PingOne, etc.).

## Modify identity provider secret in Keycloak

1. Login to the target Spark tenant. Access the *Keycloak console* from the [Navigation menu](/navigation/navigation-menu.md#user-menu).
2. Log into the Keycloak Admin Console using your admin credentials.
3. In the left pane, click on the "Identity Providers" link.
4. On the *identity-provider-settings* page, click on your Keycloak OIDC identity provider.
5. In the *OpenID Connect Config* section, paste the secret.
6. At the bottom of the page, click the **Save** button.