# Client Side Certificate Authentication

**URL:** <https://forum.mattermost.com/t/client-side-certificate-authentication/1174>\
**Category:** Troubleshooting\
**Created:** [March 28, 2016, 5:28pm UTC](https://forum.mattermost.com/t/client-side-certificate-authentication/1174 "2016-03-28T17:28:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![vrenjith](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/vrenjith/32/312_2.png) [@vrenjith](https://forum.mattermost.com/u/vrenjith)\
**Post date:** [March 28, 2016, 5:28pm UTC](https://forum.mattermost.com/t/client-side-certificate-authentication/1174/1 "2016-03-28T17:28:11Z")

</div>

Is there anyway that I can authenticate the client using the client certificates (nginx can be configured for it) and pass this information in http headers into Mattermost?

---

<div class="post-metadata">

**Author:** ![jwilander](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.mattermost.com/jwilander/32/8440_2.png) [@jwilander](https://forum.mattermost.com/u/jwilander)\
**Post date:** [March 29, 2016, 12:36pm UTC](https://forum.mattermost.com/t/client-side-certificate-authentication/1174/2 "2016-03-29T12:36:10Z")

</div>

Hi @vrenjith,

There’s no explicit support in Mattermost for it, all our authentication is done through email/password, OAuth or LDAP. Once the user is created we then return temporary session tokens to the client to provide in headers to get access to that specific session. Sessions are configurable for how long they last so you might be able to configure them to last a long time and somehow embed the session token in your client certificate and have nginx push in the appropriate HTTP headers.

If you’d like to make a feature request for this you can follow our process [here](https://www.mattermost.org/feature-requests/).