Skip to content

Update X509 Certificate Authenticator Docs #22066

Open
@ThaminduDilshan

Description

@ThaminduDilshan

Document issue type

Type/Improvement (Suggest changes to enhance the clarity, usability, or accuracy of existing content)

Description

The x509 certificate documentation at [1] seems to be missing some steps and requires to be updated. The following points can be addressed as an improvement.

  • The sub step c) of step 7 asks to add two properties to a openssl config file.
    • However the two file locations given can be changed based on the openssl installation method and is also OS dependent.
    • Also the file could be read only based on the OS (ex: the openssl.cnf file is read only in Mac OS) and would be better ask to take a copy of the file and edit it.
    • Also the property defined as x509\_extensions has a typo and could also be different based on the openssl installation method.
  • Also instead of adding the certificate to a new keystore, it can be added to the default truststore of identity server. However need to clarify whether this is a mandatory step.
  • Step 3 and 4 of "Configure the Authentication Endpoint" seems to be optional. However the documentation could be bit misleading.
  • The requirement to perform "Add a claim mapping for the certificate" step depend on the choice for the above point.
  • The browser steps given under "Import certificate" seems to be outdated with the latest browser versions. Need to add the correct steps or point to a browser documentation.
  • Application registration steps under "Register an app" section needs to be updated as per the new UI.

[1] https://is.docs.wso2.com/en/latest/guides/authentication/mfa/add-x509-login/

Version

IS 7.1.0

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status

    No status

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions