{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "$id": "https://artifacts.apis.io/microsoft-entra/json-schema/microsoft-entra-password-credential-schema.json",
  "title": "PasswordCredential",
  "description": "Represents a password credential (client secret) associated with an application or service principal",
  "x-generated": "2026-11-05",
  "x-method": "derived",
  "x-generator": "derive-json-schema.py",
  "x-source": "openapi/microsoft-entra-applications-api-openapi.yml#/components/schemas/PasswordCredential",
  "type": "object",
  "properties": {
    "keyId": {
      "type": "string",
      "format": "uuid",
      "readOnly": true,
      "description": "Unique identifier for the password"
    },
    "displayName": {
      "type": [
        "string",
        "null"
      ],
      "description": "Friendly name for the password credential"
    },
    "hint": {
      "type": "string",
      "readOnly": true,
      "description": "Contains the first three characters of the password (returned on read operations)"
    },
    "secretText": {
      "type": "string",
      "readOnly": true,
      "description": "The generated password value. Only returned at creation time and cannot be retrieved later."
    },
    "startDateTime": {
      "type": "string",
      "format": "date-time",
      "description": "The date and time at which the password becomes valid"
    },
    "endDateTime": {
      "type": "string",
      "format": "date-time",
      "description": "The date and time at which the password expires. Maximum lifetime varies by policy."
    }
  }
}