Support Certificate-Based Credentials for OAuth2/OpenID Authentication

Spotfire currently supports OpenID Connect (OIDC) and OAuth 2.0 authentication with cloud-based identity providers such as Microsoft Entra ID (formerly Azure AD).
At present, integration with Azure requires administrators to configure the connection in the Spotfire Administration Console using client credentials (client ID and client secret).

However, according to our organization’s updated security policy, client secrets are no longer considered secure. The policy mandates the use of certificate-based credentials instead of client secrets, as outlined in Microsoft’s official guidance: https://learn.microsoft.com/en-us/entra/identity-platform/certificate-credentials

Currently, Spotfire Server does not support certificate credentials for OpenID/OAuth2.0 authentication - only client secrets.

We request that Spotfire Server be enhanced to include support for certificate-based credentials when configuring OpenID Connect / OAuth2 integrations, in alignment with modern security standards and Azure AD best practices.