I would like to log the following in my telemetry for diagnostic and usage purposes:
Should I treat them as secrets/PII and hash/encrypt them?
(it goes without saying I will not be retaining the client secret in any way shape or form)
Tenant Id - this is the unique identifier of the Azure Active Directory instance. Client Id - this identifier will be assigned when Seq is set up as an application in the directory instance (the new Azure portal calls this Application Id) Client Key - this is the secret key Seq will use when communicating with AAD.
a tenant is associated with a single identity (person, company, or organization) and can own one or several subscriptions. a subscription is linked to a payment setup and each subscription will result in a separate bill.
Ultimately, you should determine what to log and how, from a compliance/privacy/security perspective, based on official and compliance/privacy/security reviews and certifications within your company or by 3rd parties.
That disclaimer aside:
Do note that some companies and privacy reviews often consider these 3 data points as Organization Identifiable Information (OII) and sometimes have policies for handling those (less stringent that PII though).
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With