Certificate-based authentication requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit e526f45 · +2 −2 lines · also on GitHub
⋯ 10 unchanged lines
1111
ms.author: justinha
1212
author: justinha
1313
manager: amycolannino
14
−ms.reviewer: vimrang
14
+ms.reviewer: vranganathan
1515
1616
ms.collection: M365-identity-device-management
1717
ms.custom: has-adal-ref
⋯ 55 unchanged lines
7373
- Certificate Authority hints aren't supported, so the list of certificates that appears for users in the certificate picker UI isn't scoped.
7474
- Only one CRL Distribution Point (CDP) for a trusted CA is supported.
7575
- The CDP can be only HTTP URLs. We don't support Online Certificate Status Protocol (OCSP), or Lightweight Directory Access Protocol (LDAP) URLs.
76
−- Configuring other certificate-to-user account bindings, such as using the **Subject**, **Subject + Issuer** or **Issuer + Serial Number**, aren’t available in this release.
76
+- Configuring other certificate-to-user account bindings, such as using the **Subject**, **Subject + Issuer**, or **Issuer + Serial Number**, aren’t available in this release.
7777
- Password as an authentication method cannot be disabled and the option to sign in using a password is displayed even with Microsoft Entra CBA method available to the user.
7878
7979
## Known Limitation with Windows Hello For Business certificates
⋯ 19 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 03:46 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.