Set up Private Key JWT authentication for your Microsoft Entra ID account to enable
secure token-based connections to the Control Room.
Before you begin
Ensure the following:
- You have administrator access to the Azure portal.
- You have a certificate file ready to upload.
- You have administrator access to the Control Room.
About this task
Complete this procedure to configure Private Key JWT
authentication, which allows the Control Room to verify tokens issued by
Microsoft Entra ID.
Procedure
-
Log in to the Azure portal.
-
Navigate to Manage > Certificates &
secrets.
-
Select Upload certificate.
-
Enter values in the Description, Start
date, and Expiration date fields.
-
Upload the certificate file.
-
Copy the thumbprint from the certificates configuration screen.
You will use this thumbprint when configuring the OAuth
client in the Control Room.
-
Obtain the private key associated with your certificate.
You will upload this key to the Control Room in the next
step.
-
Upload the private key in
.pem format to the Control Room.
The private key is encrypted and stored securely in the credential
vault.
Your certificate is now configured in Microsoft Entra ID. You can use
the thumbprint and private key to set up the OAuth client in
the Control Room.