Client Certificate Authentication Should Not Be Used For Users

Client certificates are hard to revoke and rotate, making them unsuitable for user authentication. Use stronger mechanisms such as OIDC instead.

Medium

Security

Using Console

Refer to the remediation guidance for this control. Detailed console, CLI and Python steps are being generated.

⌘I