Repository navigation
Using a certificate instead of a client secret #139
Description
In the Entra admin center it says "For a higher level of assurance, we recommend using a certificate (instead of a client secret) as a credential".
Is this something that the "identity" library or "msal" can help with?
Here's a reference:
https://learn.microsoft.com/en-us/entra/identity-platform/certificate-credentials
Activity
rayluo commentedon Apr 11, 2024
By default, this web app sample demonstrates reading
client_credentialfrom an ENV VAR which is typically a client secret string.However, if you somehow organize your certificate information in the format described by
msal.ConfidentialClientApplication'sclient_credentialparameter, this sample is expected to use that certificate. You can give it a try.