Moveworks Events enhancement - Credential Management Middleware

Sharing a suggestion from Brayden Gravestock.

We have a challenge with access/refresh tokens that expire and Rapid can only use non-expiring credentials
 

Objective: Enhance Moveworks' role as a secure intermediary for managing access and refresh tokens between Entra and Rapid Global.

Key Benefits:

• Seamless Integration: Bridges the gap between Entra's expiring tokens and Rapid Global's need for non-expiring credentials.
• Enhanced Security: Utilizes a secret manager for secure credential storage and recall.
• Automated Token Handling: Automates token exchange and refresh processes, reducing manual intervention.
• Real-time Monitoring: Alerts personnel to issues, ensuring prompt resolution and minimal downtime.
• Scalability: Can be adapted for similar token management challenges in other integrations.

Implementation Steps:

1. Securely store credentials using a secret manager.
2. Exchange credentials with Entra for an access token.
3. Use the token to update Rapid Global's webhook endpoint every 20 minutes.
4. Notify personnel of any issues and refresh the process if necessary.
5. Advocate for long-term solutions like self-refreshing tokens or non-expiring tokens with annual updates.

This enhancement will improve operational efficiency and reliability, positioning Moveworks as a robust solution for token management challenges.