User cost attribution secret expiry

Symptoms

• From the UCA console, you may experience a message that reads:

  "Unexpected Status on /getSasUri endpoint. Status code: 502 (BadGateway). Response body: <DOCTYPE html PUBLIC "-//W3CJ/OTD XHTML Strict//EN" etc.

• From the Settings > Nerdio environment page, under User cost attribution, you may see an error that reads:

  "User cost attribution diagnostics ERROR"

• The details of this error look similar to a Trigger Diagnostics Error, including the 502 – Web Server received an invalid response error.

Resolution

To resolve the UCA issue:

1. In Entra ID, navigate to the UCA app service registration.

   Note: This is generally prefixed with nmw-ccl-app.

2. Select App Registration.

3. From the Overview page, copy the Application (client) ID value.

4. In the Manage blade, select Certificates & secrets.

5. Select + New client secret.

6. Enter the following information:

   • Description: Type the required description.

   • Expiry duration: Specify an expiry duration (730 days is recommended).

7. Once you have entered the desired information, select Add,

8. Copy the Value value that is generated.

   Note: You are not able to access this value again if it is lost. If it is lost, you need to restart this process.

9. Navigate to the User Cost Attribution Key Vault.

   Note: This is generally prefixed with nmw-ccl-kv.

10. Within the vault, select Objects > Secrets from the menu.

11. Identify the secret with the same name as your Application (client) ID, which was recorded previously.

12. Select this secret, then select New Version.

13. Paste the Value, which was previously recorded, as the new secret value.

14. Apply the change and close the page.

15. Restart the User Cost Attribution Web App.

    This completes the required actions.