How to test Azure Certificate Based authentication on mobile device

Question

We are going to be turning on Azure certificate based authentication. Our goal is for user not to have to enter a changed password on their mobile device.

In addition to reading all the documentation, we also talked with a Microsoft Solutions Team on how to implement the CBA properly.

How can we test that the CBA is working on the mobile device(s)?

The only way I can think of is to change the test user's password and see if we get expected results on the mobile device.

If anyone has some additional testing ideas, I would be very interested.

Thanks

Thomas

Answer 1

@Thomas L Thank you for reaching out to us, As I understand you are looking to test the functionality of Azure AD/Microsoft Entra Certificate Based Authentication on the mobile devices by changing the user's password.

As per the documentation - https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-certificate-based-authentication-mobile-android what i see is CBA can be used to connect to

• Office mobile applications such as Microsoft Outlook and Microsoft Word
• Exchange ActiveSync (EAS) clients

No where in the documentation it is mentioned CBA can be used for SSPR. Also, I did review this section How each authentication method works where CBA is used as for Primary authentication.

However I will check with my in which scenario's we can test CBA functionality on the Mobile devices and keep you posted.