You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
description: 'Describes how MQTT clients are authenticated and mTLS connection is established when a client connects to Azure Event Grid’s MQTT broker feature.'
4
4
ms.topic: concept-article
5
-
ms.date: 01/21/2025
6
-
author: george-guirguis
7
-
ms.author: geguirgu
5
+
ms.date: 01/27/2025
6
+
author: george-guirguis, seth-shanmugam
7
+
ms.author: geguirgu, seshanmugam
8
8
ms.subservice: mqtt
9
9
# Customer intent: I want to learn about different types of authentication that MQTT broker in Azure Event Grid supports.
10
10
---
@@ -14,15 +14,20 @@ ms.subservice: mqtt
14
14
Azure Event Grid's MQTT broker supports the following authentication modes.
15
15
16
16
- Certificate-based authentication
17
-
- Microsoft Entra ID authentication
17
+
- Microsoft Entra ID authentication
18
+
- Custom JWT authentication
18
19
19
20
## Certificate-based authentication
20
21
You can use Certificate Authority (CA) signed certificates or self-signed certificates to authenticate clients. For more information, see [MQTT Client authentication using certificates](mqtt-client-certificate-authentication.md).
21
22
22
23
## Microsoft Entra ID authentication
23
24
You can authenticate MQTT clients with Microsoft Entra JWT to connect to Event Grid namespace. You can use Azure role-based access control (Azure RBAC) to enable MQTT clients, with Microsoft Entra identity, to publish or subscribe access to specific topic spaces. For more information, see [Microsoft Entra JWT authentication and Azure RBAC authorization to publish or subscribe MQTT messages](mqtt-client-microsoft-entra-token-and-rbac.md).
24
25
26
+
## Custom JWT authentication
27
+
You can authenticate MQTT clients using JSON Web Tokens (JWT) issued by any third-party OpenID Connect (OIDC) identity provider. This authentication method provides a lightweight, secure, and flexible option for MQTT clients that are not provisioned in Azure.For more information, see [authenticate client using custom JWT](mqtt-client-custom-jwt.md)
28
+
25
29
## Related content
26
30
- Learn how to [authenticate clients using certificate chain](mqtt-certificate-chain-client-authentication.md)
27
31
- Learn how to [authenticate client using Microsoft Entra ID token](mqtt-client-azure-ad-token-and-rbac.md)
32
+
- Learn how to [authenticate client using custom JWT](mqtt-client-custom-jwt.md)
28
33
- See [Transport layer security with MQTT broker](mqtt-transport-layer-security-flow.md)
0 commit comments