CERTIFICATE FOR AAD CONNECTOR

[ag420]

Hello experts 🙂

My client don't want to use secrets for authentication for the connector to AzureAD. Can Saviynt supports certificate-based authentication with Azure AD ?

[NM · Accepted solution]

Hi @ag420 SSL certificate based authentication is supported with rest don't think it is with AzureAD ootb connector.

[Amit_Malik · Accepted solution]

You have to use REST connector in that case for your client

[rushikeshvartak · Accepted solution]

Just adding steps for REST Connector .

To implement certificate-based authentication, follow these steps:

1. Generate a Certificate:

   • Generate a certificate (self-signed or from a trusted Certificate Authority) in a supported format (e.g., .pem or .pfx).

2. Register Application in Azure AD:

   • Register an app in Azure AD that Saviynt will use to connect.
   • In the Azure AD portal, go to Certificates & Secrets under the registered app, and upload the public key of your certificate.

3. Configure Saviynt Connection:

   • In Saviynt, update the CONNECTIONJSON of the Azure AD connector.
   • Instead of using client secrets, provide the certificate details such as:
     • client_certificate: The certificate data (either as a file or as a base64-encoded string).
     • client_certificate_password (if required for .pfx files).
     • Other OAuth authentication details, including tenant ID, client ID, and resource URL.

[ag420]

Thanks @rushikeshvartak  🙂