Using Certificates for authentication

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：2分

    • Request an access token with a certificate credential.

    始める前に

    1. You can either use a self-signed certificate or CA issued certificate. You can create a self-signed certificate by executing the PowerShell script as outlined inSetting up an Azure AD app for app-only access. The script generates two files: .PFX file and .CER file.
      注:
      Ensure that you are aware of the password that is used to encrypt private key to generate the .PFX file and .CER file.
    2. Use the .PFX file to create a Java Key Store (JKS) file.
      注:
      Ensure that you are aware of the password that is used to generate JKS file from the .PFX file.
    Role required: admin

    手順

    1. Navigate to App registrations in Azure AD portal.
    2. Click Certificates & secrets from the Manage section.
    3. In the Certificates tab, click Upload Certificate.
    4. On the form, fill these values.
      Field Description
      Upload a certificate (public key) with one of the following file types: .cer, .pem, .crt .CER file you had generated using the PowerShell script.
      Description Description of the certificate.
    5. Click Add.
      The certificate is uploaded and its details are displayed under the Certificates tab.
    6. Copy the Thumbprint value of the uploaded certificate.
      The Thumbprint value is a hexadecimal value.
      Thumbprint of the uploaded certificate.
    7. Encode the Thumbprint value to a Base64 value and record the value for later use.
      注:
      You can use a Hexadecimal to Base64 (Hex to Base64) converter tool to encode the Thumbprint value to a Base64 value.