Certificate authentication bindings and limitations
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 6678117 · +2 −2 lines · also on GitHub
⋯ 290 unchanged lines
291291
292292
#### Cloud-only accounts (M:1)
293293
294
−For cloud-only accounts, you can map multiple certificates (up to five) to use by populating the `certificateUserIds` field with unique values to identify each certificate. To map the certificates, in the admin center, go to the **Authorization info** tab.
294
+For cloud-only accounts, you can map up to five certificates to use by populating the `certificateUserIds` field with unique values to identify each certificate. To map the certificates, in the admin center, go to the **Authorization info** tab.
295295
296296
If the organization uses high-affinity bindings like `IssuerAndSerialNumber`, values in `certificateUserIds` might look like the following example:
297297
⋯ 74 unchanged lines
372372
To sync to `certificateUserIds`:
373373
374374
1. Configure Microsoft Entra Connect to add the `alternativeSecurityIds` field to the metaverse.
375
−1. For each on-premises Server Active Directory forest, configure a new custom inbound rule with a high precedence (a low number, below 100). Add an `Expression` transform with the `altSecurityIdentities` field as the source. The target expression uses the key attribute that you selected and populated, and it uses the mapping to the user types you defined.
375
+1. For each on-premises Active Directory forest, configure a new custom inbound rule with a high precedence (a low number, below 100). Add an `Expression` transform with the `altSecurityIdentities` field as the source. The target expression uses the key attribute that you selected and populated, and it uses the mapping to the user types you defined.
376376
377377
For example:
378378
⋯ 352 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:46 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.