SSO oidc auth and jwt authentication on external provider

Vault
1

Hello,

i’ve read this very informative article: How-to configure Ping Identity OIDC authentication with Vault – HashiCorp Help Center
and it works, when provider gives secret.

but as i know, PingID can authenticate requests by certificates, like private pem key.

So i wonder if vault supports this method of authentication on provider… If so, which setting is for it?

on generic JWT/OIDC - Auth Methods | Vault | HashiCorp Developer i can’t understand what is for it.