Re: [Architecture] WSO2 IS/APIM : support Mutual TLS Profile for OAuth 2.0 ?

2018-05-10 Thread Youcef HILEM
Hi Sathya, We need to implement the regulatory requirements (http://www.etsi.org/deliver/etsi_ts/102600_102699/10264003/02.01.01_60/ts_10264003v020101p.pdf), in particular: 6.3 : REM Sender/REM Recipient Authentication b) Enhanced: using enhanced authentication such as two factor authentication

Re: [Architecture] WSO2 IS/APIM : support Mutual TLS Profile for OAuth 2.0 ?

2018-05-04 Thread Sathya Bandara
Hi Youcef, Currently this feature supports client authentication using self-signed certificates. You can refer the official documentation at [1]. [1] https://docs.wso2.com/pages/viewpage.action?spaceKey=IS550=Mutual+TLS+for+OAuth+Clients Thanks, Sathya On Fri, May 4, 2018 at 1:50 PM, Youcef

Re: [Architecture] WSO2 IS/APIM : support Mutual TLS Profile for OAuth 2.0 ?

2018-05-04 Thread Youcef HILEM
Hi, Good news : I just found that it's implemented : [1] https://github.com/wso2/product-is/issues/2751 [2] http://wso2-oxygen-tank.10903.n7.nabble.com/IS-5-5-0-TLS-Mutual-Authentication-for-OAuth-2-0-clients-td155448.html [3]