Secret Management Reminder for Expiring Secrets in OutSystems
133
Views
4
Comments
New
Collaboration

OutSystems now supports storing settings as secrets in both OutSystems 11 (Site Properties as Secrets) and OutSystems ODC. However, secrets often have an expiration date, and without proper tracking, they can expire unnoticed, causing disruptions.

Proposed ideas:

  1. Optional Expiration Date for Secrets – Allow users to set an expiration date for secrets stored in Site Properties (OutSystems 11) and Secrets (OutSystems ODC).
  2. Reminder Notifications – Enable reminders to be sent before expiration to a specified role so they can take action.

This feature would help OutSystems 11 / ODC users proactively manage secrets and avoid unexpected failures due to expired credentials.

Your idea is very useful! Determining a expiration date for secrets and having reminder notifications can prevent unexpected errors and improve security management. This avoids downtime by reminding users before secrets expires and helping the teams to be active instead of responding to errors, this increases the security of regular updates. But I have a concern that might require additional system resources to track and send a reminder, and if too much more reminders are sent, it can be heavy for users. Sometimes a customizable notification help balance the reminder? What do you think? 

2025-05-31 09-56-11
TheSubuIyer
Champion

Great idea. Yes this will definitely help for API keys and other secrets that may expire in a fixed time frame. 

@Sriyamini this can be done with a set expiry flag the it will be limited to traking only aite properties with an exipry

@TheSubuIyer it is  nice point because the expiry flag helps limit tracking to only relevant Site Properties. I think adding an option for customizable notifications will help strike a balance between reminders and avoiding too many alerts. 

This is a great idea! Adding an optional expiry date with customizable reminders will help teams stay proactive and avoid disruptions. It also improves security by encouraging timely updates of secrets without overwhelming users