---
title: "Deactivate a client secret"
method: POST
path: "/api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/deactivate"
tags: ["Application"]
---

# Deactivate a client secret

`POST /api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/deactivate`

## Request

- Base URL: `https://your-subdomain.okta.com`
- URL: `https://your-subdomain.okta.com/api/v1/apps/{appId}/credentials/secrets/{secretId}/lifecycle/deactivate`
- Auth: API key in header `Authorization`

Deactivates a specific client secret by secretId

## Path parameters

- `appId` string, required
- `secretId` string, required

## Response `200`

Success

- ClientSecret
  - `_links` object
  - `client_secret` string
  - `created` string, date-time
  - `id` string
  - `lastUpdated` string, date-time
  - `secret_hash` string
  - `status` 'ACTIVE' | 'INACTIVE'

---

[API](https://skmtc.dev/okta/apis/okta-api.md) - [All operations](https://skmtc.dev/okta/apis/okta-api/llms.txt) - [OpenAPI document](https://skmtc.dev/okta/apis/okta-api/revisions/7e5249c30571?raw)