Azure AD Authentication for Oracle APEX Applications using Certificate instead of Client Secret

Trying to configure APEX 22.2 to use Azure AD for authentication but all the "how-to's" I have found use a Client Secret for credentials. We are required to use a Certificate instead of a Client Secret. Azure AD can use either method.

In short, we want to do what is in this article but using a Certificate instead of a Client Secret for Credentials: https://oracle-base.com/articles/misc/azure-ad-authentication-for-oracle-apex-applications

For clarity, here are the options in Azure AD

Thanks