Share via

Is it possible to have Certificate Authentication with Azure EventHub using Kafka API

Mahendra Sawarkar 60 Reputation points
2025-07-01T07:40:04.33+00:00

I am able to establish the Authentication with Azure Eventhub using Kafka API with below methods:

  1. Shared access policies, Primary Connection String
  2. IAM OAuth2 with details like ClientID, TenantID, ClientSecret value

I am trying to establish the authentication with Certificate in the App Registration section.

The Next I would be trying the Federated Credential for Authentication.

I am unable to successfully integrate the Certificate Authentication with Kafka API

Could you please help me with this investigative path

Thanks !!

Azure App Configuration
Azure App Configuration
An Azure service that provides hosted, universal storage for Azure app configurations.
Accepted answer
  1. Navya 20,820 Reputation points Microsoft External Staff Moderator
    2025-07-03T18:33:06.0533333+00:00

    Hi Mahendra Sawarkar

    You cannot use certificate-based authentication (client certificate) with the Kafka API for Azure Event Hubs. Azure Event Hubs supports authentication for the Kafka endpoint via:

    Shared Access Signature (SAS) policies (using connection strings)

    OAuth 2.0 with Microsoft Entra ID (using client credentials, managed identity, or federated credentials)

    Certificate-based authentication is not supported for the Kafka endpoint in Azure Event Hubs. The use of SSL/TLS certificates in Azure Event Hubs is strictly for encryption in transit.

    For your refence: https://learn.microsoft.com/en-us/azure/event-hubs/azure-event-hubs-apache-kafka-overview#security-and-authentication

    Hope this helps. Do let us know if you any further queries.

    Please remember to "Accept Answer" if answer helped you. This will help us as well as others in the community who might be researching similar questions.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.