'Azure AD App Registration certificate credentials - What should the certificate common name be?
When using a certificate for authentication to Microsoft Identity Platform, are there specific details required for the certificate? Does Azure AD actually verify if the common name matches the server?
If my app registration is for a web app, could I just re-use the same SSL certificate that's used for the HTTPS binding?
For a daemon app, I guess the common name should be the hostname FQDN?
Solution 1:[1]
No, Azure AD does not verify a match between the certificate CN and the host name. Also:
- A 2048-bit size is highly recommended for the best combination of security and performance.
- It must use the RSA cryptographic algorithm.
- Can be signed with SHA256, SHA384 and SHA512 hash algorithms.
Sources
This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.
Source: Stack Overflow
| Solution | Source |
|---|---|
| Solution 1 | AlfredoRevilla-MSFT |