Authentication with certificate

[buzzo123]

There's a way to auto login via Certificate? (Client Credentials Flow)

[sameerag]

@buzzo123 Can you please expand your case in steps, we can help you if we already have it covered. cc @derisen

[buzzo123]

I need to enable a web-app to auto-login if the web app is opened from specific machines. Reading Microsoft Docs i found the Client Credentials Flow with certificate and i think this can help me to achieved my goal.

[derisen]

@buzzo123 Are you sure Client Credentials Flow is what you're looking for? This flow is used with apps that are not user-facing (i.e. not signing-in any user), for instance background services or what is called daemon apps. These apps have their own identity, determined by their client credential. So they are not tied to specific machines (can you elaborate more on this?), but to their ability to prove their identity (via some sort of secret or certificate).

Here's an example and some documentation to back it up.

You can use certificate credentials in any type of confidential client application. See the upcoming documentation on this (it's currently in PR stage). We can put together a working sample if further help is needed.

[buzzo123]

thanks, i think i need this. Im trying to run this example and sending GET request with PostMan but it doesn't work.
Ok, i run with https and now works, but if i run it in incognito mode server ask me my credential, but i need the app to auto-login if client have the certificate used by the server

[derisen]

@buzzo123 Ah, that example is a web app (using auth code flow), so that's why its asking for user credentials. What you need is a daemon/console app (using client credentials flow). I know the terminology is confusing, but try to use your certificates with this sample instead. If you run into problems, feel free to raise an issue in that repository.