Client Credentials

There are two types of client secrets in MSAL4J:

• Application Secrets
• Certificates

Client Credentials with application secret in MSAL4J

During the registration of a the confidential client application with Azure AD, a client secret is generated (a kind of application password). When the client wants to acquire a token in its own name it will:

• Create IClientCredential using the ClientCredentialFactory, passing in the client secret, which should be a string.

IClientCredential credential = ClientCredentialFactory.create(CLIENT_SECRET)```


### Client Credentials with certificate 

In this case, when the application is registered with Azure AD, it uploads the public key of a certificate. When it wants to acquire a token, the client application will

- Create `IClientCredential` using the `ClientCredentialFactory`, passing in either both the public and private keys, or a InputStream of the pkcs12


`
PrivateKey privateKey;  
X509Certificate publicKey;  
IClientCredential credential = ClientCredentialFactory.create(privateKey, publicKey)` 

or 

`
InputStream inputStream;  
String password;  
IClientCredential credential = ClientCredentialFactory.create(inputStream, password)`


- You would then create a confiential client application and pass in the client credential. 

`ConfidentialClientApplication app =
                    ConfidentialClientApplication.builder(
                        CLIENT_ID,
                        credential)
                .build();`