How to replace the client authentication using azure Ad credentials using MSI in .Net core Startup configuration?

Question

How to replace the client authentication using azure Ad credentials using MSI in .Net core Startup configuration?

I am using Azure Ad credentials in appsettings.config and authenticating the client in startup configuration but as per the S360 compliance it should be replaced with MSI.

Could anybody suggest how to implement MSI in .Net Core.

I am using key vault certificates thumbprints.