Client SSL Authentication

GeoV
Tera Expert

We have inbound  Client SSL Rest API enabled. The Client Certificate all set up and also linked to a  specific user

 

The API makes   POST request to make an attachment to table Record via server side script

 

Now from Postman I am making a POST request to the API  to Servicenow  using the same user linked to the client SSL - but just with Basic Authentication and it works. The server side script attaches the json document to the record.

 

Question - when  the user is required make SSL authentication (by way of linking the user to a client SSL) - why did the basic authentication worked?. My understanding is - without the Client SSL Authentication for that user - the connection simply fails.

 

Please let me know if my understanding is correct. The  reason we went for Client SSL Authentication is  that  - extra security.

 

Thanks

 

GeoGV

 

 

 

0 REPLIES 0