SSO with Entra ID, SSO_CLIENT_SECRET, use a certificate instead of a password

[BurtGummer]

Hello,

I try to setup SSO with a new installed Vaultwarden (Debian 13, docker compose, minimal template):

https://github.com/dani-garcia/vaultwarden/wiki/Enabling-SSO-support-using-OpenId-Connect#microsoft-entra-id

But on Entra ID, I can't create a secret for SSO_CLIENT_SECRET - is there a way to use a certificate instead of a password?

[BurtGummer]

ok, works with secret/password too (Application Policies)