OIDC Certificate vs. Secret
-
We're implementing OIDC SSO auth with Microsoft Entra for a client, and we'd like to be able to use a certificate rather than a secret when configure the identity provider in FusionAuth. It looks to me like the only option is to use a secret, and there's no obvious or documented way to use a certificate in place of a secret. Is this the case? If so it's unfortunate since there's an required expiration for Entra secrets (we're trying to avoid this).
Can you confirm my suspicion here?
-
Yes, there's currently no support for using a certificate.
Here's an open tracking issue: https://github.com/FusionAuth/fusionauth-issues/issues/3083
Please comment and/or upvote this with any other details that would help the product team prioritize this.
