private ClientAssertionCertificate GetCert() { X509Certificate2 cert; using (X509Store store = new X509Store(StoreName.My, StoreLocation.LocalMachine)) { cert = store.FindCertificateByThumbprint(Configuration["AzureAd:CertThumbprint"]); } return(new ClientAssertionCertificate(Configuration["AzureAd:ClientId"], cert)); }