App registration certificate authentication

Question

I am looking for any official documentation on best practices related to using self-signed certificates for app registration authentication.

Since the issuer is not validated, it is not clear that there are any disadvantages to using a self-signed certificate.

Does anyone know of any official guidance on this matter?

Thanks!

Answer 1

If used solely as a secret, there aren't that many disadvantages. It's mainly around the lifecycle of the certificate itself, and being able to enforce some policy in terms of key strength, validity, etc.

Answer 2

Hi @ritmo2k

Thank you for posting your query on Microsoft Q&A.

I understand that you are looking for an official documentation on best practices related to using self-signed certificates for app registration authentication.

Follow this documentation: Create a self-signed public certificate to authenticate your application

Since the issuer is not validated, Self-signed certificates are considered unsafe for public-facing websites and applications.

Hope this helps. Do let us know if you have any further queries.

---

If this answers your query, do click `Accept Answer` and `Yes` for was this answer helpful. And, if you have any further query do let us know.

Thanks,

B. Siri Chandana.