title: Using a certificate to grant an application access to Azure Key Vault
body: <p>I have a web API hosted on Windows server via IIS. I'm using Azure Key Vault to hide secrets. In order to give the application access to the vault, I am using a certificate installed on the server, which is also registered with the application in Azure.
  The certs thumbprint, the tenant ID, and the application ID are all exposed in the configuration file of the web API. The apps registration is granted access via policy in the key vault.</p>
  <p>The issue is that the integration assistant in Azure is alerting me that I should not have a certificate set up inside the registration, but with no explanation as to why (the documentation is greyed out for alert).</p>
  <p>Can this alert be safely ignored? Or is there a better way to grant my application vault access?</p>
  <p>Edit - snip of integration assistant:</p>
  <p><a href="https://i.stack.imgur.com/Nzp6Z.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/Nzp6Z.png" alt="enter image description here" /></a></p>