Client Certificate authentication for API calls

[gregorw]

In a previous blog post Divya Mary, details the process of Client Cert authentication for API calls between the Provider and the back-end system

https://blogs.sap.com/2018/01/19/sap-cloud-platform-api-management-client-certificate-authentication...

A question was asked in that post, calling an API Proxy from an external application with client cert authentication.

Is there a blog post detailing this, as I am trying to test using a client cert instead of using OAuth or SAML.

Thank you,

Raj

[gregorw]

Hi Raj,

could you describe for the sake of clarification if your end goal is to authenticate end users with X.509 client certificates or a service user that is calling the API with the certificate? Perhaps a drawing of your intended architecture will help also.

CU
Gregor

[Rutuja]

Were you able to find an answer for this? I have a similar requirement where I want to authenticate the the third party application calling the API proxy using certificate authentication. Do you know what config needs to be done in the BTP?

[Former Member]

Gregor,

It will be a service user calling the API with a certificate for authentication.

I am trying to test with a self signed X.509 certificate. What I don't know is how do I configure the APIProxyEndPoint to authenticate against a Client Cert.

I have used API Keys and OAuth V2.0 in policies and have had success. But wanted to try mutual authentication using X.509.

Thank you,

Raj