Skip to content

Commit 6357178

Browse files
Incorporated the review comments.
1 parent e17082f commit 6357178

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

articles/container-apps/client-certificate-authorization.md

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,15 +5,15 @@ services: container-apps
55
author: craigshoemaker
66
ms.service: azure-container-apps
77
ms.topic: how-to
8-
ms.date: 05/02/2025
8+
ms.date: 05/15/2025
99
ms.author: cshoe
1010
---
1111

1212
# Configure client certificate authentication in Azure Container Apps
1313

1414
Azure Container Apps supports client certificate authentication (also known as mutual TLS or mTLS) that allows access to your container app through two-way authentication. This article shows you how to configure client certificate authorization in Azure Container Apps.
1515

16-
When client certificates are used, the TLS certificates are exchanged between the client and your container app to authenticate identity and encrypt traffic. Client certificates are often used in "Zero Trust" security models to authorize client access within an organization.
16+
When client certificates are used, the TLS certificates are exchanged between the client and your container app to authenticate identity and encrypt traffic. Client certificates are often used in "zero trust" security models to authorize client access within an organization.
1717

1818
For example, you might want to require a client certificate for a container app that manages sensitive data.
1919

@@ -45,7 +45,7 @@ The following ARM template example configures ingress to require a client certif
4545
}
4646
```
4747
> [!NOTE]
48-
> You can set the `clientCertificateMode` directly on the ingress property. It isn't yet available as an explicit option in the CLI, but you can patch your app using the Azure CLI.
48+
> You can set the `clientCertificateMode` directly on the ingress property. It isn't available as an explicit option in the CLI, but you can patch your app using the Azure CLI.
4949
5050
Before you run the following commands, make sure to replace the placeholders surrounded by `<>` with your own values.
5151

@@ -78,7 +78,9 @@ az rest \
7878

7979
The value for `clientCertificateMode` varies what you need to provide for Container Apps to manage your certificate:
8080
- When `require` is set, the client must provide a certificate.
81-
- When `accept` is set, the certificate is optional. If the client provides a certificate, it is passed to the app in the `X-Forwarded-Client-Cert` header, as a semicolon-separated list. For example:
81+
- When `accept` is set, the certificate is optional. If the client provides a certificate, it passes to the app in the `X-Forwarded-Client-Cert` header, as a semicolon-separated list.
82+
83+
For example:
8284

8385
Before you use the following example, make sure to replace the placeholders surrounded by `<>` with your own values.
8486

0 commit comments

Comments
 (0)