In the Entra admin center it says "For a higher level of assurance, we recommend using a certificate (instead of a client secret) as a credential".
Is this something that the "identity" library or "msal" can help with?
Here's a reference:
https://learn.microsoft.com/en-us/entra/identity-platform/certificate-credentials