Who can use this: Tech admin
Available on: Any Gong plan
Rotating a client secret replaces the current secret with a new one. During the grace period you choose, both the old and new secrets are valid, so your integration can migrate to the new secret without downtime. When the grace period ends, the old secret is permanently revoked. Rotation does not end active user sessions or revoke existing access tokens.
Before you begin
Secret rotation applies to integrations with the Manual registration type only. Learn more about creating an OAuth app for Gong.
Note:
Only two secrets can be active at once. If you rotate again before the grace period ends, the previous old secret is revoked immediately and a new grace period begins for the newly replaced secret.
To rotate an OAuth client secret:
From the left sidebar, click Admin center.
In the Settings tab, click API under Ecosystem.
Click the Integrations tab.
Find the integration you want to update and click the More actions icon, then click Edit.
In the Credentials section, click Rotate secret.
In the Old secret grace period field, enter the number of hours the old secret remains valid. Enter 0 to revoke it immediately. The maximum is 168 hours; the default is 24.
Click I confirm rotation.
Copy the new client secret.
Important:
The new secret is displayed once. Copy it now. You can copy it again during the same session, but it will not be shown after you close or reload the page.
The Credentials section now shows two secrets: Client secret (old) and Client secret (new). The old secret remains valid until the grace period ends or until you rotate again, whichever comes first.
Frequently asked questions
Does rotating the secret affect active user sessions or access tokens?
No. Rotation does not end active sessions or revoke access tokens. It replaces the secret used to request new tokens. Users and integrations already authenticated continue to work until their tokens expire naturally.
What happens if I rotate again before the grace period ends?
The old secret from the previous rotation is revoked immediately, and a new grace period begins for the secret just replaced. Only two secrets can be active at once.
Can I see the new secret again after closing the page?
No. The new secret is shown once in full during the session. Copy it before closing or reloading the page. You can copy it multiple times within the same session.