GuidesAPI Reference
API Reference

List the mTLS Authenticators configured for the specified mTLS Identity Provider

Get the list of mTLS Authenticators that are configured to authenticate certificates for the specified mTLS Identity Provider.

An mTLS Identity Provider always has 1 mTLS Authenticator configured automatically by default:

  • The Default Authenticator is capable of authenticating certificates issued by the Certificate Authority of the mTLS Identity Provider.
  • The Default Authenticator maps each authenticating certificate to an identity of accountType car in the realm
  • The Default Authenticator uses the Subject.CN field from the certificate to identify and map to the carId field of the car
  • The Default Authenticator is automatically created with a new app in the realm that is included in all access tokens provided by the authenticator
  • The Default Authenticator is enabled by default when it is created
  • The Default Authenticator and its corresponding app is automatically deleted when its mTLS Identity Provider is deleted


Access Control:

  • The calling principal must have "readMtlsIdentityProviders" action permission for the resource "{realm}" in the "account" service.
  • The calling principal MUST NOT include a project scope.
Path Params
string
required

HRN identifying the Realm. You can also use the shorthand "me" to refer to the Realm HRN indicated by your access token context.

string
required

HRN for the specific mTLS IdentityProvider with a realm

Headers
string

Correlates HTTP requests between a client and server. If not present in the incoming request, it will be generated. This header and value will be included in all loglines including access logs. It will also be propagated to downstream services and returned in the response.

string

The unique for the request, used to track this request within the service. X-Request-ID value is NOT propagated to the downstream services.

Responses

Language
Credentials
Bearer
JWT
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json