Implement MTLS in integrated Developer portal to access MTLS virtual host Proxies

Hi Apigee Community and @dchiesa1 ,

I am Working on a POC to implement MTLS in integrated developer portal. We have few virtual hosts which are configured with MTLS and Client Authentication. We are able to test those API's from Postman by configuring certificate and key in certificate configuration. But when we test this api's from developer portal we are getting No Required SSL error. 

Kindly suggest how we can implement MTLS authentication from Integrated developer portal to MTLS API's in Apigee Edge.

Solved Solved
3 1 96
1 ACCEPTED SOLUTION

You cannot do that from the integrated developer portal. 

The Integrated developer portal won't allow you to attach a client-side TLS certificate. If it did allow that, it would be insecure. 

You may want to enforce mTLS on the production systems, and one-way TLS on the sandbox APIs, which are accessible from the developer portal. Separate the TLS issue from the "interactive documentation" capability.

 

View solution in original post

1 REPLY 1

You cannot do that from the integrated developer portal. 

The Integrated developer portal won't allow you to attach a client-side TLS certificate. If it did allow that, it would be insecure. 

You may want to enforce mTLS on the production systems, and one-way TLS on the sandbox APIs, which are accessible from the developer portal. Separate the TLS issue from the "interactive documentation" capability.