{"action":"created","issue":{"url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/13098","repository_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs","labels_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/13098/labels{/name}","comments_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/13098/comments","events_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/13098/events","html_url":"https://github.com/MicrosoftDocs/azure-docs/issues/13098","id":348884682,"node_id":"MDU6SXNzdWUzNDg4ODQ2ODI=","number":13098,"title":"Authentication with Certification Authority-Issued Certificates","user":{"login":"guilhermepsantos","id":1526756,"node_id":"MDQ6VXNlcjE1MjY3NTY=","avatar_url":"https://avatars3.githubusercontent.com/u/1526756?v=4","gravatar_id":"","url":"https://api.github.com/users/guilhermepsantos","html_url":"https://github.com/guilhermepsantos","followers_url":"https://api.github.com/users/guilhermepsantos/followers","following_url":"https://api.github.com/users/guilhermepsantos/following{/other_user}","gists_url":"https://api.github.com/users/guilhermepsantos/gists{/gist_id}","starred_url":"https://api.github.com/users/guilhermepsantos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/guilhermepsantos/subscriptions","organizations_url":"https://api.github.com/users/guilhermepsantos/orgs","repos_url":"https://api.github.com/users/guilhermepsantos/repos","events_url":"https://api.github.com/users/guilhermepsantos/events{/privacy}","received_events_url":"https://api.github.com/users/guilhermepsantos/received_events","type":"User","site_admin":false},"labels":[{"id":646555990,"node_id":"MDU6TGFiZWw2NDY1NTU5OTA=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/active-directory/svc","name":"active-directory/svc","color":"0040cc","default":false},{"id":836703193,"node_id":"MDU6TGFiZWw4MzY3MDMxOTM=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/cxp","name":"cxp","color":"bf1394","default":false},{"id":836703308,"node_id":"MDU6TGFiZWw4MzY3MDMzMDg=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/in-progress","name":"in-progress","color":"c1d9ff","default":false},{"id":853283851,"node_id":"MDU6TGFiZWw4NTMyODM4NTE=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/product-question","name":"product-question","color":"43e08a","default":false},{"id":836702742,"node_id":"MDU6TGFiZWw4MzY3MDI3NDI=","url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/labels/triaged","name":"triaged","color":"0e8a16","default":false}],"state":"closed","locked":false,"assignee":{"login":"SaurabhSharma-MSFT","id":38112130,"node_id":"MDQ6VXNlcjM4MTEyMTMw","avatar_url":"https://avatars3.githubusercontent.com/u/38112130?v=4","gravatar_id":"","url":"https://api.github.com/users/SaurabhSharma-MSFT","html_url":"https://github.com/SaurabhSharma-MSFT","followers_url":"https://api.github.com/users/SaurabhSharma-MSFT/followers","following_url":"https://api.github.com/users/SaurabhSharma-MSFT/following{/other_user}","gists_url":"https://api.github.com/users/SaurabhSharma-MSFT/gists{/gist_id}","starred_url":"https://api.github.com/users/SaurabhSharma-MSFT/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SaurabhSharma-MSFT/subscriptions","organizations_url":"https://api.github.com/users/SaurabhSharma-MSFT/orgs","repos_url":"https://api.github.com/users/SaurabhSharma-MSFT/repos","events_url":"https://api.github.com/users/SaurabhSharma-MSFT/events{/privacy}","received_events_url":"https://api.github.com/users/SaurabhSharma-MSFT/received_events","type":"User","site_admin":false},"assignees":[{"login":"SaurabhSharma-MSFT","id":38112130,"node_id":"MDQ6VXNlcjM4MTEyMTMw","avatar_url":"https://avatars3.githubusercontent.com/u/38112130?v=4","gravatar_id":"","url":"https://api.github.com/users/SaurabhSharma-MSFT","html_url":"https://github.com/SaurabhSharma-MSFT","followers_url":"https://api.github.com/users/SaurabhSharma-MSFT/followers","following_url":"https://api.github.com/users/SaurabhSharma-MSFT/following{/other_user}","gists_url":"https://api.github.com/users/SaurabhSharma-MSFT/gists{/gist_id}","starred_url":"https://api.github.com/users/SaurabhSharma-MSFT/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SaurabhSharma-MSFT/subscriptions","organizations_url":"https://api.github.com/users/SaurabhSharma-MSFT/orgs","repos_url":"https://api.github.com/users/SaurabhSharma-MSFT/repos","events_url":"https://api.github.com/users/SaurabhSharma-MSFT/events{/privacy}","received_events_url":"https://api.github.com/users/SaurabhSharma-MSFT/received_events","type":"User","site_admin":false}],"milestone":null,"comments":2,"created_at":"2018-08-08T20:43:29Z","updated_at":"2018-08-09T01:33:20Z","closed_at":"2018-08-09T01:33:20Z","author_association":"NONE","body":"We'd be interested in using certificate-based authentication of applications to Azure AD.\n\nHowever, rather than having one certificate used by all instances of an application (e.g., multiple containers running the same API server for scaling purposes), we would prefer to issue to each running instance its own certificate.\n\nTo make this work with Azure AD, we'd need to be able to say \"this application authenticates through certificates signed by this certificate authority\" and upload the certificate authority's public key. Then, Azure AD would check if the certificate it receives is *signed by* the registered CA. Standard X.509 certificates would be used.\n\nA major advantage of this approach is that it enables tying credentials to specific instances (and, consequently, addresses). So, if a credential gets reused by a second IP address, we can have that flagged as a potential issue. You can also issue short-lived certificates to each instance, without one instance's expiring credential affecting the others.\n\n---\n#### Document Details\n\n⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*\n\n* ID: 7e44b783-3ca5-6b6a-1f33-d7a107b8f8e0\n* Version Independent ID: aa2bb5fd-bd0d-830c-84c7-0525657b6d4f\n* Content: [Certificate credentials in Azure AD](https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-certificate-credentials)\n* Content Source: [articles/active-directory/develop/active-directory-certificate-credentials.md](https://github.com/Microsoft/azure-docs/blob/master/articles/active-directory/develop/active-directory-certificate-credentials.md)\n* Service: **active-directory**\n* GitHub Login: @CelesteDG\n* Microsoft Alias: **celested**"},"comment":{"url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/comments/411608562","html_url":"https://github.com/MicrosoftDocs/azure-docs/issues/13098#issuecomment-411608562","issue_url":"https://api.github.com/repos/MicrosoftDocs/azure-docs/issues/13098","id":411608562,"node_id":"MDEyOklzc3VlQ29tbWVudDQxMTYwODU2Mg==","user":{"login":"guilhermepsantos","id":1526756,"node_id":"MDQ6VXNlcjE1MjY3NTY=","avatar_url":"https://avatars3.githubusercontent.com/u/1526756?v=4","gravatar_id":"","url":"https://api.github.com/users/guilhermepsantos","html_url":"https://github.com/guilhermepsantos","followers_url":"https://api.github.com/users/guilhermepsantos/followers","following_url":"https://api.github.com/users/guilhermepsantos/following{/other_user}","gists_url":"https://api.github.com/users/guilhermepsantos/gists{/gist_id}","starred_url":"https://api.github.com/users/guilhermepsantos/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/guilhermepsantos/subscriptions","organizations_url":"https://api.github.com/users/guilhermepsantos/orgs","repos_url":"https://api.github.com/users/guilhermepsantos/repos","events_url":"https://api.github.com/users/guilhermepsantos/events{/privacy}","received_events_url":"https://api.github.com/users/guilhermepsantos/received_events","type":"User","site_admin":false},"created_at":"2018-08-09T01:33:20Z","updated_at":"2018-08-09T01:33:20Z","author_association":"NONE","body":"Will do, thanks!"}}
{"actor":{"display_login":"guilhermepsantos"}}