← Back to plugin index

OAuth 2.0 Client mTLS Authentication
Description
Configures a client authentication that is based on a client certificate which is used in the TLS handshake.

The certificate from the TLS handshake is verified with the certificates of the client, which is either configured (static client) or stored in the database.

Note: If a gateway is used, the corresponding Gateway Settings must be configured in the Loginapp.

Type name
OAuth2ClientMTLSAuthentication
Class
com.airlock.iam.oauth2.application.configuration.clientauthentication.OAuth2ClientMTLSAuthenticationConfig
May be used by
OAuth 2.0 Token Endpoint
License-Tags
OAuthServer
Properties
Cert Status Checkers (certStatusCheckers)
Description
A list of certificate status checker plug-ins used to check the revocation status of the client certificate. If more than one status checker plug-ins is configured, all of them are consulted and the certificate is considered to be revoked if at least one of them says so.
Attributes
Plugin-List
Optional
Assignable plugins
Always Revoked Status Checker CRL Certificate Status Checker CRL Distribution Point Extension CRL Checker Caching Certificate Status Checker Dummy Certificate Status Checker OCSP Certificate Status Checker
YAML Template (with default values) 

type: OAuth2ClientMTLSAuthentication
id: OAuth2ClientMTLSAuthentication-xxxxxx
displayName: 
comment: 
properties:
  certStatusCheckers: