Connect to SPO from Azure automation runbook using a certificate

Hi David Remillard 

I gave up on using a certificate for authentication when running a script from Azure Runbook. One thing that I found bit promising was to store the exported certificate file (including the private key) in runbook account, in runbook script store the certificate to runbook temporary storage and then invoke Connect-PnPOnline (code below).

What I ended up ultimately was to use the legacy SharePoint App-Only principals? 

# # Save authentication certificate to temp location
$certificate = Get-AutomationCertificate -Name "<certificate name>";
$credentials = Get-AutomationPSCredential -Name "<credentials i.e. the password for certificate file>";
$secureCertificatePassword = $credentials.Password;
$certificatePassword = $credentials.GetNetworkCredential().Password;
$certificatePath = "$env:TEMP\temp.pfx";
$pfxCertificate = $certificate.Export(3, $certificatePassword);
if(Test-Path $certificatePath){
	Remove-Item -Path $certificatePath;
}
Set-Content -Value $pfxCertificate -Path $certificatePath -Encoding Byte;

# #verify certificate
if(Test-Path $certificatePath){
	$pnpCert = Get-PnPAzureCertificate -CertificatePassword $secureCertificatePassword -CertificatePath $certificatePath;
	Write-Output "Saved certificate to $certificatePath, Thumbprint=$($pnpCert.Thumbprint)";
 }

# Connect using the certificate
$url = "<site url>";
$tenantAdminUrl = "<SOP admin url>";
$clientId = "<app client ID>";
$tenantId = "<tenant ID>";
Write-Output "Connecting to $url with $clientId";
$connection = Connect-PnPOnline -ReturnConnection -Url $url -ClientId $clientId -Tenant $tenantId -CertificatePath $certificatePath -CertificatePassword $secureCertificatePassword -ValidateConnection;