зеркало из
1
0
Форкнуть 0
Git-Credential-Manager-Core/docs
Matthew John Cheetham 1d06bd5d54
Add support for sending X5C when using a service principal with certificate for authentication (#1666)
When using a service principal with certificate authentication, every
time the certificate is renewed, the new certificate needs to be
uploaded to the service principal's AAD app registration in order for
authentication to continue to work.

However, a technology called "X5C" has made this unnecessary by allowing
_any_ certificate, with a _specific_ subject, issued by a known,
trusted, predetermined CA, to be used.

For this to work, the AAD app registration's manifest needs to be
updated to reflect the subject name, and during authentication, the
request for "X5C" authentication needs to be sent along with the
certificate's signature.

This change enables that to take place.
2024-07-19 12:20:09 -07:00
..
img
README.md docs: add Azure Repos MI/SP docs 2024-03-14 14:26:55 -07:00
architecture.md
autodetect.md
azrepos-misp.md Update configuration and environment documentation to document the new x5c MSAL claim option 2024-07-18 17:50:46 -07:00
azrepos-users-and-tokens.md
bitbucket-authentication.md
bitbucket-development.md
configuration.md Update configuration and environment documentation to document the new x5c MSAL claim option 2024-07-18 17:50:46 -07:00
credstores.md
development.md dotnet: update from .NET 7 to .NET 8 2024-04-15 14:05:20 -07:00
enterprise-config.md
environment.md Update configuration and environment documentation to document the new x5c MSAL claim option 2024-07-18 17:50:46 -07:00
faq.md
generic-oauth.md docs: update generic-oauth.md 2024-07-18 02:35:36 +09:00
github-apideprecation.md
gitlab.md
hostprovider.md
install.md
linux-fromsrc-uninstall.md
linux-validate-gpg.md
migration.md
multiple-users.md
netconfig.md
rename.md
usage.md
windows-broker.md
wsl.md