Certificate based auth
See original GitHub issueAzure AD app registrations show two credential mechanisms in Azure Portal: client secret (supported today with clientSecret
) and certificate. It would be great to support both. in this GitHub Action.
I’m envisioning a clientCertificate
property where the content is the base64 encoded certificate content (PEM/PFX).
The benefit of this approach is that certificates are a strong form of credential than client secret and many organizations allow a longer rotation period for certificates than secrets (which are much like passwords).
Issue Analytics
- State:
- Created 2 years ago
- Reactions:4
- Comments:11
Top Results From Across the Web
What is Certificate-based Authentication? - GlobalSign
Certificate -based Authentication (CBA) uses a digital certificate, acquired via cryptography, to identify a user, machine or device before granting access ...
Read more >Overview of Azure AD certificate-based authentication
Azure AD certificate-based authentication (CBA) enables customers to allow or require users to authenticate directly with X.509 certificates ...
Read more >How does certificate-based authentication work?
Certificate -based authentication is a cryptographic technique that allows one computer to securely identify itself to another across a network connection, ...
Read more >Certificate-based authentication - IBM
Certificate -based authentication is based on what the user has, which is the user's private key, and what the user knows, which is...
Read more >Introduction to Certificate-based Authentication
Certificate -based authentication is generally considered preferable to password-based authentication because it is based on what the user has, the private key, ...
Read more >
Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free
Top Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Some organisations insist on certificate auth, except by exception (a convoluted process in an enterprise). Would be great to have this so we can start using Github actions
Hey @tulsishell, I have updated the URL, but in a nutshell: