how do i create clientId and clientsecret to be able to update the windows store

To update apps in the Microsoft Store programmatically (for example via the Microsoft Store submission API or Visual Studio’s automatic submission), a Microsoft Entra ID (Azure AD) application with a client ID and client secret is required. The high-level steps are:

1. Associate Partner Center with Microsoft Entra ID
   1. In Partner Center, associate the organization’s Partner Center account with the Microsoft Entra ID directory.
   2. From Account settings → Users, add or create the Microsoft Entra ID application that will access submissions and assign it the Manager role.
2. Get tenant ID and client ID from Partner Center
   1. In Partner Center, go back to Account settings → Users.
   2. Select the Microsoft Entra ID application that was added.
   3. Copy the Tenant ID and Client ID values.
3. Create a client secret (key) for the app Option A – From Azure portal (recommended for Store submission API):
   1. Sign in to the Azure portal.
   2. Select Microsoft Entra ID → App registrations → select the application.
   3. Go to Certificates & secrets → Client secrets → New client secret.
   4. Add a description and choose an expiration (up to 24 months; Microsoft recommends less than 12 months).
   5. Select Add, then immediately copy and securely store the secret value; it will not be shown again.
   Option B – From Partner Center (for add-ins / some Store scenarios):
   1. In Partner Center, go to the page to create or update client IDs and secrets.
   2. Provide:
      • Friendly name (for example, “store submission app”).
      • App domain (for example, app.contoso.com, without http:// or https://).
      • App redirect URL (must start with https://, http://, or ms-app://).
   3. Choose Create secret now.
   4. Select a validity period (1, 2, or 3 years) and the availability (worldwide or China only).
   5. Confirm to create the secret, then copy and securely store the client ID and client secret and their validity dates; they will not be shown again.
4. Use client ID and client secret to obtain an access token For the Microsoft Store submission API (MSI/EXE apps):
   1. Send an HTTP POST to: https://login.microsoftonline.com/<tenant-id>/oauth2/v2.0/token
   2. Use form-encoded body:

            grant_type=client_credentials
            &client_id=<your_client_id>
            &client_secret=<your_client_secret>
            &scope=https://api.store.microsoft.com/.default
      

   3. Use the returned access token in the Authorization: Bearer <token> header when calling the Store submission API.
5. Configure automatic Store submissions in Visual Studio (optional)
   1. In Visual Studio’s Create App Packages wizard, select Automatically submit to the Microsoft Store after Windows App Certification Kit validation and choose Reconfigure.
   2. Enter the Azure tenant ID, Client ID, and Client key (client secret).
   3. Visual Studio will use these credentials to submit updates to the Store.

Keep the client secret secure and track its expiration. When it is close to expiring, generate a new secret and update any tools or services that use it.

References:

• Create or update client IDs and secrets in Partner Center
• Microsoft Store submission API for MSI or EXE app
• Package a desktop or UWP app in Visual Studio
• Register an application with the Microsoft identity platform
• Requesting a User Store ID for service-to-service authentication