Client Certificate authentication for API calls

[Former Member]

In a previous blog post Divya Mary, details the process of Client Cert authentication for API calls between the Provider and the back-end system

https://blogs.sap.com/2018/01/19/sap-cloud-platform-api-management-client-certificate-authentication...

A question was asked in that post, calling an API Proxy from an external application with client cert authentication.

Is there a blog post detailing this, as I am trying to test using a client cert instead of using OAuth or SAML.

Thank you,

Raj

[gregorw]

Hi Raj,

could you describe for the sake of clarification if your end goal is to authenticate end users with X.509 client certificates or a service user that is calling the API with the certificate? Perhaps a drawing of your intended architecture will help also.

CU
Gregor

[Rutuja]

Were you able to find an answer for this? I have a similar requirement where I want to authenticate the the third party application calling the API proxy using certificate authentication. Do you know what config needs to be done in the BTP?

[divyamary]

Hi Raj,

Enabling client certificate authentication for your API Proxy endpoint requires configurations to be done by SAP Cloud Platform API Management operations team. Therefore it would be great to open an incident on the component OPU-API-DT-OPS mentioning your tenant details. Our operations team would share the steps for securely sharing the client certificate and would guide you through the necessary configurations.

Thanks and Best Regards,

Divya