Certificate-Based Authentication (CBA) can be configured in App management and reused by supported workloads, including Exchange Online management actions and PnP SharePoint custom actions. This configuration uses the existing Microsoft Entra app registration associated with App management. The public certificate is uploaded in Microsoft Entra, while the private key is uploaded in App management.