In Microsoft Azure, a client secret's value is only displayed upon its initial creation for security reasons. It cannot be retrieved or viewed again. If the administrator did not save the client secret, the only and most direct course of action is to generate a new one for the existing App Registration. This is a quick process within the Azure portal that does not require re-creating the application or re-assigning permissions, making it the most efficient solution to complete the FortiGate SDN connector configuration.

A. Create a new resource group: A resource group is a container for Azure resources and is not related to the credentials (client secret) of an App Registration. C. Create a new app registration: This is a valid but inefficient method. It would require re-creating the application identity and re-assigning all necessary permissions, making it much slower than simply creating a new secret. D. Create a new external connector for Azure: This action is on the FortiGate, but the problem lies in obtaining the missing credential from Azure. This does not solve the root cause.

1. Fortinet Documentation: The FortiGate Azure Administration Guide outlines the required

parameters for the SDN connector, including the client secret which must be obtained from Azure.

Source: Fortinet. (2023). FortiGate-Azure 7.4.0 Administration Guide. Page 23, "Configuring the

SDN connector".

URL: https://docs.fortinet.com/document/fortigate-azure/7.4.0/administration-guide/282906/config

uring-the-sdn-connector

2. Microsoft Official Documentation: Microsoft's documentation explicitly states that a client

secret value cannot be retrieved after creation and a new one must be generated if the original is

lost.

Source: Microsoft Learn. (2023). Quickstart: Register an application with the Microsoft identity

platform. "Add a client secret" section.

Quote: "Be sure to record the secret's value for use in your client application's code. This secret

value is never displayed again after you leave this page."

URL: https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app#add-a-client

-secret