Skip to content

Updated authenticating-with-client-certificates.md #4868

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ArooshLele merged 12 commits into from
Mar 6, 2026
Merged

Updated authenticating-with-client-certificates.md #4868

Changes from 6 commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
4f8bf70
Updated authenticating-with-client-certificates.md
ArooshLele Dec 22, 2025
648fcd8
Merge branch 'master' into MVD-7348_Add_a_note_on_DIGTNMAP_page
ArooshLele Jan 16, 2026
1c0786b
Merge branch 'master' into MVD-7348_Add_a_note_on_DIGTNMAP_page
ArooshLele Jan 28, 2026
757ce76
Update authenticating-with-client-certificates.md
ArooshLele Feb 12, 2026
064c108
Merge branch 'master' into MVD-7348_Add_a_note_on_DIGTNMAP_page
ArooshLele Feb 12, 2026
00c093a
Merge branch 'master' into MVD-7348_Add_a_note_on_DIGTNMAP_page
ArooshLele Feb 13, 2026
fd00e44
Update authenticating-with-client-certificates.md (#4930)
ArooshLele Feb 13, 2026
2ca3e5c
Merge branch 'master' into MVD-7348_Add_a_note_on_DIGTNMAP_page
ArooshLele Feb 16, 2026
5f5d22a
Update authenticating-with-client-certificates.md (#4932)
ArooshLele Feb 16, 2026
3a90839
Update authenticating-with-client-certificates.md (#4935)
ArooshLele Feb 23, 2026
e518cfd
Merge branch 'master' into MVD-7348_Add_a_note_on_DIGTNMAP_page
ArooshLele Mar 2, 2026
59a513f
Update authenticating-with-client-certificates.md (#4945)
ArooshLele Mar 6, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions docs/user-guide/authenticating-with-client-certificates.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,17 @@ If using the internal API ML mapper (default from Zowe v3) and the MAP / CERTMAP

:::tip
To disable the API ML mapper, ensure that you set the parameter `components.gateway.apiml.security.useInternalMapper` to `false`.
Copy link
Contributor

@pablocarle pablocarle Feb 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this statement should be removed, as it could be confusing, the guide is already written to recommend not changing the default

Copy link
Collaborator Author

@ArooshLele ArooshLele Feb 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this statement should be removed, as it could be confusing, the guide is already written to recommend not changing the default

Noted. The statement [To disable the API ML mapper, ensure that you set the parameter components.gateway.apiml.security.useInternalMapper to false.] is removed.

Copy link
Collaborator Author

@ArooshLele ArooshLele Mar 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@pablocarle Hi Pablo, could you please confirm whether the text is correct? Kindly let us know if any further changes to the text are required. Thanks for your help!
CC: @gauravs-20 @ArooshLele @1000TurquoisePogs @anaxceron @janan07

If the internal mapper is disabled, then API ML only supports DIGTNMAP for certificate-to-user mapping.
If the internal mapper is enabled, then API ML supports the following:
- DIGTNMAP for certificate-to-user mapping.
- Adding the certificate to the user.
:::

:::note
API ML currently only supports `DIGTNMAP` for certificate-to-user mapping.
Copy link
Contributor

@pablocarle pablocarle Jan 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is only if disabling the internal mapper, but with internal mapper enabled it supports both mapping and adding the certificate to the user:

https://github.com/zowe/docs-site/pull/4868/changes#diff-aeab6f0cab716353a01b0056f8553738d3b9f5a4242f82bdc67b2641f03acd22R115

Copy link
Collaborator Author

@ArooshLele ArooshLele Jan 16, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@pablocarle Thanks for your feedback.

The following is a draft of the reworded note.
Please let me know whether it is correct or whether any information is to be added.
Thanks in advance!

Note:
If the internal mapper is disabled, then API ML only supports DIGTNMAP for certificate-to-user mapping.
If the internal mapper is enabled, then API ML supports the following:

:::
Copy link
Contributor

@pablocarle pablocarle Feb 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is backwards, the default in v3 is internal mapper:

Internal mapper: supports DIGTNMAP and adding the cert to the user.
ZSS mapper: only supports adding the certificate to the user.

The note says that API ML only supports DIGTNMAP, but this is not true. In the default internal mapper, both are supported.

Copy link
Collaborator Author

@ArooshLele ArooshLele Feb 13, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The statement is updated.



</details>

**ACF2**
Expand Down
Loading