Snow Atlas Release Blog — Tijana Miljanovic (Flexera Software)
Enhanced SaaS Management - Certificate based authorization support for EntraID, M365 and MS Defender
Release date: September 16, 2026
This release delivers Certificate-Based Authentication (CBA) as an alternative authorization method for the Microsoft Entra ID, Microsoft 365 (M365), and Microsoft Defender connectors in Flexera One SaaS Management (FOSM).
Building on the existing OAuth2 Client Credentials method (Client ID + Client Secret), customers can now configure and authorize Microsoft connectors using customer-managed certificates tied to their Azure (Entra ID) app registrations.
This release achieves functional parity with FSM, satisfies strict regulatory compliance mandates such as DORA (Digital Operational Resilience Act), and supports enterprise security policies requiring stronger authentication mechanisms without disrupting or forcing deprecation of existing client credential configurations.