diff --git a/.changeset/real-apes-build.md b/.changeset/real-apes-build.md
new file mode 100644
index 0000000000..5481bebf3a
--- /dev/null
+++ b/.changeset/real-apes-build.md
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-auth-backend-module-microsoft-provider': patch
+---
+
+Correctly mark the client secret in configuration as secret
diff --git a/plugins/auth-backend-module-microsoft-provider/config.d.ts b/plugins/auth-backend-module-microsoft-provider/config.d.ts
index 5f1fa958e5..c58178d6eb 100644
--- a/plugins/auth-backend-module-microsoft-provider/config.d.ts
+++ b/plugins/auth-backend-module-microsoft-provider/config.d.ts
@@ -21,10 +21,10 @@ export interface Config {
       microsoft?: {
         [authEnv: string]: {
           clientId: string;
+          tenantId: string;
           /**
            * @visibility secret
            */
-          tenantId: string;
           clientSecret: string;
           callbackUrl?: string;
         };