Understanding certificates and secrets
There are two types of authentications available for applications inside Azure AD: application secrets and certificate-based authentication. You need the secret or the certificate to get access to the app registration from your application. Certificate-based authentication is recommended by Microsoft, but for our demonstration, an app secret will do.
In the next demonstration, we are going to configure an app secret.
Configuring an app secret in the Azure portal
In this demonstration, we are going to configure an app secret in the Azure portal. To configure an app secret, we need to take the following steps:
- From the app registration overview page of the registered application, under Manage, select Certificates & secrets.
- Here, you can upload a certificate or you can configure an app secret. Under Client secrets, click + New client secret:
Figure 2.13 – Certificates and secrets
-
...
