get
https://Use API Lookup for a base URL/realms//mtlsIdentityProviders//authenticators
Get the list of mTLS Authenticators that are configured to authenticate certificates for the specified mTLS Identity Provider.
An mTLS Identity Provider always has 1 mTLS Authenticator configured automatically by default:
- The Default Authenticator is capable of authenticating certificates issued by the Certificate Authority of the mTLS Identity Provider.
- The Default Authenticator maps each authenticating certificate to an identity of accountType car in the realm
- The Default Authenticator uses the Subject.CN field from the certificate to identify and map to the carId field of the car
- The Default Authenticator is automatically created with a new app in the realm that is included in all access tokens provided by the authenticator
- The Default Authenticator is enabled by default when it is created
- The Default Authenticator and its corresponding app is automatically deleted when its mTLS Identity Provider is deleted
Access Control:
- The calling principal must have "readMtlsIdentityProviders" action permission for the resource "{realm}" in the "account" service.
- The calling principal MUST NOT include a project scope.