diff --git a/ansible/roles/stack-sunbird/templates/sunbird_player.env b/ansible/roles/stack-sunbird/templates/sunbird_player.env
index 5270de2f103e7bc3224381106b1b34ec1ac87eef..058f5ceb8a97456621f7a53ea6431e0fcc538bd9 100644
--- a/ansible/roles/stack-sunbird/templates/sunbird_player.env
+++ b/ansible/roles/stack-sunbird/templates/sunbird_player.env
@@ -147,3 +147,9 @@ sunbird_anonymous_session_ttl={{sunbird_anonymous_session_ttl|default(1800000)}}
 
 # api whitelisting for sunbird portal
 sunbird_enable_api_whitelist={{sunbird_enable_api_whitelist|default('true')}}
+
+# sunbird session secret key
+# Changing the secret value will invalidate all existing sessions.
+# In order to rotate the secret without invalidating sessions, provide an array of secrets,
+# with the new secret as first element of the array, and followed by previous secrets.
+sunbird_portal_session_secret={{sunbird_portal_session_secret}}
\ No newline at end of file
diff --git a/private_repo/ansible/inventory/dev/Core/secrets.yml b/private_repo/ansible/inventory/dev/Core/secrets.yml
index 3a80841d6581b600671d74af14f748982475d4be..199c25f914d8b9627c961f9bff5a56570d9ecaf2 100644
--- a/private_repo/ansible/inventory/dev/Core/secrets.yml
+++ b/private_repo/ansible/inventory/dev/Core/secrets.yml
@@ -115,5 +115,11 @@ core_vault_kibana_google_client_id:
 core_vault_kibana_google_client_secret: 
 core_vault_kibana_cookie_secret: kibanaoauth # Cookie secret for kibana Oauth
 
+# sunbird session secret key
+# Changing the secret value will invalidate all existing sessions.
+# In order to rotate the secret without invalidating sessions, provide an array of secrets,
+# with the new secret as first element of the array, and followed by previous secrets.
+sunbird_portal_session_secret:
+
 # !!!!! DO NOT UPDATE VARS BELOW THIS !!!
 # ***************************************************************************** #