Skip to content
6 changes: 6 additions & 0 deletions docs/user-guide/authenticating-with-client-certificates.md
Original file line number Diff line number Diff line change
Expand Up @@ -71,6 +71,12 @@ If using the internal API ML mapper (default from Zowe v3) and the MAP / CERTMAP
:::tip
To disable the API ML mapper, ensure that you set the parameter `components.gateway.apiml.security.useInternalMapper` to `false`.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this statement should be removed, as it could be confusing, the guide is already written to recommend not changing the default

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this statement should be removed, as it could be confusing, the guide is already written to recommend not changing the default

Noted. The statement [To disable the API ML mapper, ensure that you set the parameter components.gateway.apiml.security.useInternalMapper to false.] is removed.

:::

:::note
API ML currently only supports `DIGTNMAP` for certificate-to-user mapping.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is only if disabling the internal mapper, but with internal mapper enabled it supports both mapping and adding the certificate to the user:

https://github.com/zowe/docs-site/pull/4868/changes#diff-aeab6f0cab716353a01b0056f8553738d3b9f5a4242f82bdc67b2641f03acd22R115

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@pablocarle Thanks for your feedback.

The following is a draft of the reworded note.
Please let me know whether it is correct or whether any information is to be added.
Thanks in advance!

Note:
If the internal mapper is disabled, then API ML only supports DIGTNMAP for certificate-to-user mapping.
If the internal mapper is enabled, then API ML supports the following:

:::


</details>

**ACF2**
Expand Down
Loading