Client Certificate authentication for API calls

[gregorw]

In a previous blog post Divya Mary, details the process of Client Cert authentication for API calls between the Provider and the back-end system

https://blogs.sap.com/2018/01/19/sap-cloud-platform-api-management-client-certificate-authentication...

A question was asked in that post, calling an API Proxy from an external application with client cert authentication.

Is there a blog post detailing this, as I am trying to test using a client cert instead of using OAuth or SAML.

Thank you,

Raj

[gregorw]

Hi Raj,

could you describe for the sake of clarification if your end goal is to authenticate end users with X.509 client certificates or a service user that is calling the API with the certificate? Perhaps a drawing of your intended architecture will help also.

CU
Gregor

[Rutuja]

Were you able to find an answer for this? I have a similar requirement where I want to authenticate the the third party application calling the API proxy using certificate authentication. Do you know what config needs to be done in the BTP?

[Former Member]

Ivan, thanks for the reply. I tend to use Postman for testing.

My question was relating to SAP Cloud platform. If I were to implement X.509 certificate authentication, where would I configure the certificate? Can it be done from within the Cockpit or is it an Admin task?

Regards,

Raj