Hi everyone,
I’m working on an OutSystems 11 application that needs to call an external REST API requiring mutual TLS (client certificate authentication). I’ve already generated the client certificate, converted it to .pfx, and uploaded it in Service Center under SSL Certificates. However, in Service Studio REST configuration I only see authentication options like No Authentication, Basic, and OAuth 2.0, and there’s no visible option to attach a client certificate. I also can’t find any setting in Service Center to bind the certificate to a specific outbound host.
For OutSystems environments, what is the correct way to configure outbound mTLS? Is this something that must be handled at infrastructure level by support, or is there a configuration step I’m missing?
@Le Quang Trieu : The said functionality is achieved using Extension. Please refer to the documentation at https://success.outsystems.com/support/security/secure_rest_apis_with_client_side_authentication and an example implementation available at https://www.outsystems.com/forge/component-overview/3591/https-consumer-o11
Hi @Le Quang Trieu ,
In Outsystems 11, mutual TLS(client certificate authentication) for outbound REST API call is not configured through the authentication dropdown in Service Studio ( which only shows No Authentication, Basic and OAuth 2.0). Instead, it is handled at the HTTP request level and you must attach the client certificate programmatically to the outgoing request.
The certificate you uploaded to Service center -> SSL Certificates( as .pfx) is stored in the platform certificate store and can be reference in the code, but there is no UI field in the Service Studio to bind it to a specific REST API.
You need to use an On Before Request advanced event on the consumed REST API and attach the certificate to the HTTP Request.
Outsystems does not provide a Service center setting to bind a client certificate directly to an Outbound host, that logic must be implemented in your Integration Logic.