Client Certificate Management
The concept name is not defined in the provided sources and cannot be determined from the available snippets. Based on the sources, Client Certificate Authentication in SAP BTP is a mechanism that allows developers to authenticate inbound or outbound communication using client certificates instead of, or in addition to, username/password credentials. Developers use it to securely configure integrations — for example, by uploading client certificates for their area or by configuring client certificate authentication for communication arrangements. The SAP BTP Destination Service also supports this authentication method, enabling secure connectivity to remote systems using certificate-based identity verification.
Tutorials that teach this
Docs explaining this concept
- Doc Certificates - Read Integration
- Doc Client Certificates - Issuer
- Doc Client Certificates - Subject
- Doc Configuring Client Certificate Authentication
- Doc Inbound Communication via Communication User
- Doc Maintain Client Certificates
- Doc Using Client Certificate Authentication with SAP BTP Destination Service
Prerequisites
- Concept Mutual TLS Authentication (mTLS) **Mutual TLS (mTLS)** is an authentication protocol in which both the client and the server present certificates to verify each other's identity, providing two-way trust during a connection. On SAP BTP, developers use mTLS as a more secure alternative to client secrets for authenticating applications to services such as the [SAP Authorization and Trust Management Service](https://help.sap.com/docs/btp/sap-business-technology-platform/aa803382970c41d2970c7bf265475dfb?locale=en-US&state=PRODUCTION&version=Cloud). It can also be configured at the infrastructure level — for example, via an [mTLS gateway in SAP BTP, Kyma runtime](https://help.sap.com/docs/btp/sap-business-technology-platform/e7c6c6a2b47744dbaa405b422e454303?locale=en-US&state=PRODUCTION&version=Cloud) — to enforce certificate-based mutual authentication between services. Developers retrieve OAuth access tokens using mTLS by presenting a client certificate instead of a client secret during the token request flow.
- Concept X.509 Certificate Authentication The provided sources do not contain sufficient information to define this concept. The concept name is listed as "undefined," and the source snippets do not include enough extractable content to ground a accurate, prose-based definition. Please provide a valid concept name and complete source snippets.
- Concept Communication System A **Communication System** is an external system or service registered in SAP BTP that a developer or administrator connects to for integration purposes. You can use the [Communication Systems](https://help.sap.com/docs/btp/sap-business-technology-platform/15663c157670410ca366623dff329396?locale=en-US&state=PRODUCTION&version=Cloud) app to create and manage these systems, which serve as the technical counterpart when setting up communication arrangements. Together with communication users and arrangements, communication systems are part of the broader [Communication Management](https://help.sap.com/docs/btp/sap-business-technology-platform/2e84a10c430645a88bdbfaaa23ac9ff7?locale=en-US&state=PRODUCTION&version=Cloud) toolset that allows you to integrate your system with external solutions.