{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":1202,"path":"api-reference/web-services/c_OutboundWebServicesMutualAuth.md","title":"Outbound web service mutual authentication","bundle":null,"doc_type":null,"release":"australia","body":"\n# Outbound web service mutual authentication\n\nMutual authentication establishes trust by exchanging Secure Sockets Layer \\(SSL\\) certificates.\n\nBefore connecting to a server, the client requests an SSL certificate. The server responds by requesting that the client send its own certificate. Both respond by validating the certificates of the other and sending acknowledgments before initiating an HTTPS connection.\n\nAs an administrator, you can enable mutual authentication by defining a protocol profile for connections that require mutual authentication. Protocol profiles allow you to associate a specific certificate record with a protocol, such as HTTPS.\n\nFor example, you can create a protocol profile called `mauth` with a certificate for mutual authentication. You can then make an HTTPS web service request by calling `mauth://<external-endpoint.com>` when the end point requires mutual authentication.\n\n**Note:** This feature enables mutual authentication only on outbound HTTPS connections, such as SOAP, REST, or direct HTTPS calls. ServiceNow does not support mutual authentication for outbound requests sent through a MID Server. For information about mutual authentication for inbound web services, see [Certificate-based authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/certificate-based-authentication.md).\n\n-   **[Create a protocol profile](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/api-reference/web-services/t_CreateAProtocolProfile.md)**  \nYou can create a custom HTTPS protocol profile to specify the credentials and certificates used for outbound web services. For example, you can create a custom HTTPS protocol profile to enable mutual authentication.\n-   **[Enable mutual authentication](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/api-reference/web-services/t_EnableMutualAuth.md)**  \nYou can configure a SOAP or REST message for mutual authentication using a protocol profile.\n\n**Parent Topic:**[Outbound web services](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/api-reference/web-services/outbound-web-services.md)\n\n"}}