Is it possible to use certification base authentication as a single authn

[mengleang-ngoun]

I have an idea to create a passwordless authn by using a X509 certification

[ossdhaval]

Hey @mengleang-ngoun, we are all listening. 👂 Can you elaborate? 🗒️

[mengleang-ngoun]

I want to implement certification-based authentication means that users can upload their X509 certification that contains user info in that. That certificate is issued by my system.

[mengleang-ngoun]

Based on this diagram above, certification authn this the first step and username/password is the second step in this authn process. But I wan to skip a second. dose it have any security risk. Thank you

[nynymike]

Did you check out the design for cert authentication here: https://github.com/GluuFederation/zero-trust-demo/tree/main/jans
Also oxAuth --> Auth Server as this is Janssen Project, not Gluu :-)

[mengleang-ngoun]

Thank you for sharing this information.

[mengleang-ngoun]

Currently, I play around with Janssen with supergluu. But I have a problem with /etc/certs/super_gluu_creds.json. how to we get an access_key and secret_access_key of the Push Notification Server hosted by Gluu.
Thank you supporting us