5.1 Securing Communication with Azure AD Graph

To set up SSL between the driver and Azure AD graph REST endpoints, perform the following steps:

  1. Open the following URL from your browser:

    https://graph.windows.net

  2. Obtain the public certificate and import it into the keystore.

    For example, if you are using Mozilla Firefox, perform the following steps:

    1. In the address bar, click and then click next to graph.windows.net.

    2. Click More Information.

    3. In the Security tab of the Page Info window, click View Certificate.

    4. In the Details tab, click Export and then click Save.

    5. Add the exported key to the driver keystore using the following Java keytool command:

      You need to create a new keystore which will contain the public certificate of the Azure graph endpoint.

      keytool -import -file <path to the graph cert file>\<certname.crt> -keystore <mykeystore> -alias <aliasname>