Azure SSO Authentication without Client Secret

Grafana Authentication
, ,
1

Is it possible to use Entra ID for SSO authentication without using a client secret.

Below link explains how to create/enable auth.azuread is grafana config

Is it possible to use certificates instead of Client secret in grafana.

2

Yes, use PKCE, so you don’t need any client secret or cert.

3

I see that even with PKCE we need client secret.

PKCE for OAuth 2.0

4

Where do you see that?

5

That means using PKCE I can go ahead with client authentication Method as None.

image
image655×344 20.5 KB

Also PKCE needs to be enabled during the Entra configuration right to Allow public client flows.