claims identity and cloud service certificates