Currently, we are using Certificate based Service Principal for our KeyVault. And this certificate is given by our customer and I assume they buy this certificate from an external certificate authority.
But when we use Managed Identity, Azure itself assign the certificate automatically which is invisible to the users.
So does that mean, if we use Managed identity, the customer would actually save the certificate cost? Or am I missing something?