Can certificates be distinguished by access tokens?

Question

I wonder if it is possible to distinguish certificates based on the access token I get via the client credential flow.

Or is there another way to make a distinction (such as some request with the access token)

Answer 1

No. All configured secrets are "equal" in this regard, any of them that is still valid can be used to obtain an access token, which will be indistinguishable from obtaining a token via another secret. Microsoft might be keeping some sort of usage data for each secret, but those are not exposed to us, at least not currently.