OIDC Certificate vs. Secret
-
We're implementing OIDC SSO auth with Microsoft Entra for a client, and we'd like to be able to use a certificate rather than a secret when configure the identity provider in FusionAuth. It looks to me like the only option is to use a secret, and there's no obvious or documented way to use a certificate in place of a secret. Is this the case? If so it's unfortunate since there's an required expiration for Entra secrets (we're trying to avoid this).
Can you confirm my suspicion here?