Running flow services with mTLS security modes

Learn to configure and run a flow service with mTLS in Force mode.

Procedure

  1. Create a flow service in webMethods Integration.
  2. Expose the flow service over HTTP to run the flow service from an outside environment.
  3. Select Force in the webMethods Integration Client Certificate > Configuration page.
  4. Run the flow service by using mTLS authentication by using a REST client.
    Tip: You can also use the same technique for SOAP APIs, REST APIs, or any other exposed APIs.
    Note:
    • For mTLS security mode to work with a tenant certificate, the tenant credentials and tenant certificate are mandatory.
    • The mTLS Security mode determines how the service authenticates requests. When you set the security mode to Exclusive, the service requires a valid OAuth 2.0 token and a valid tenant certificate

      When you set the security mode to Default or Force, the service requires only a valid OAuth 2.0 token. It does not require a tenant certificate in these modes.

      Make sure that you configure your tenant certificate correctly when you use the Exclusive mode. This helps prevent authentication failures.