---
title: "How To: Setup an mTLS Certificate with OAuth 2.0 Authentication"
slug: "how-to-setup-an-mtls-certificate-with-oauth-20-authentication"
updated: 2025-09-25T20:11:43Z
published: 2025-09-25T20:11:43Z
canonical: "docs.unqork.io/how-to-setup-an-mtls-certificate-with-oauth-20-authentication"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.unqork.io/llms.txt
> Use this file to discover all available pages before exploring further.

# How To: Setup an mTLS Certificate with OAuth 2.0 Authentication

## Overview

**mLTS (Mutual Transport Layer Security)** certificates add an extra layer of security on top of other integrations. You can link mTLS certificates to most service authentication types available on the [Services Administration](/v1/docs/services-administration) page. To add certificates to your environment, though, you'll use [Certificate Management](/v1/docs/certificate-management).

> [!NOTE]
> Some authentication types don't support using mTLS certificates. These include: Canada Post, Decryption (GPG), Encryption (GPG), FTP, Google Places, HMAC, Plaid, SFTP, and Twilio.

From Certificate Management, you can easily add, view, and manage mTLS certificates in your environment. After adding a certificate to your environment, you have a few options for how and where to link services to the certificate. In this article, you'll see how to link a certificate to a service when adding the service in Services Administration.

> These instructions assume you already added the certificate to your environment's Certificate Management page. Learn how to add certificates using our [Certificate Management](/v1/docs/certificate-management).

## Adding an OAuth 2.0 Authentication Service to Services Administration

Let's start by setting up the OAuth 2.0 authentication service. Here, you'll use the **OAuth2 Client Credentials Grant** authentication type.

1. At the top right of the Unqork Designer Platform, click the **Administration** button.
2. Under **Integration**, click **Services Administration**.
3. Click **+ Add a Service**
4. In the **Service Title** enter `OAuth2 + mTLS Certificate`.
5. In the **Service Name** field, enter `OAuth2mTLS Certificate`.

> [!NOTE]
> The **Service Name** value is permanent and cannot be changed.
6. Click **Next**. The **Manage Access** tab displays.
7. Set **Share to** to **Environment**.
8. Click **Create**. The SendGrid services page displays.
9. Click **Edit**
10. From the navigation menu, select **Service Type**.
11. In the **Service Protocol + Host** field, enter the service protocol address.
12. Under **Authentication Method*** from the drop-down, select **OAuth2 Client Credentials Grant**.

After selecting the Type of Authentication, prompts appear for more information. Different authentication types have different setup needs. For example, in the case of OAuth2 Client Credentials Grant, you'll see the following fields: Access Token URL, Client ID, Client Secret, and Scope.
13. Enter the access token in the **Access Token URL** field.
14. Enter the client ID in the **Client ID** field.
15. Enter the client secret in the **Client Secret** field.
16. If required, enter the scope in the **Scope** field. This field is optional.

[![A static image displaying an Oh Auth Service Type.](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin_example1_thumb_0_0.jpg?sv=2026-02-06&spr=https&st=2026-11-06T22%3A54%3A33Z&se=2026-11-06T23%3A54%3A33Z&sr=c&sp=r&sig=2xkCiuLAALu1icAdQr%2BVROdn5fm4uw2GHDn4ZEj8DS8%3D)](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/servicesAdmin%20example1.jpg?sv=2026-02-06&spr=https&st=2026-11-06T22%3A54%3A33Z&se=2026-11-06T23%3A54%3A33Z&sr=c&sp=r&sig=2xkCiuLAALu1icAdQr%2BVROdn5fm4uw2GHDn4ZEj8DS8%3D)

### Adding an mTLS Certificate to an Authentication Service

Next, you'll use the **Enable Mutual TLS** setting to link the mTLS certificate to your service. You can follow these steps to add an mTLS certificate to any service that supports it.

1. Set **Enable Mutual TLS** to ![](https://cdn.us.document360.io/15548f06-2fba-434c-b0c1-5df88317dbd7/Images/Documentation/image(43).png?sv=2026-02-06&spr=https&st=2026-11-06T22%3A54%3A33Z&se=2026-11-06T23%3A54%3A33Z&sr=c&sp=r&sig=2xkCiuLAALu1icAdQr%2BVROdn5fm4uw2GHDn4ZEj8DS8%3D) (**checked**).
2. From the **Certificate** drop-down, select a certificate.
3. Click **Save Changes**.

## Resources

- [External APIs](/v1/docs/external-apis).
- [Add a new service to the environment](/v1/docs/services-administration-how-to-add-a-service).
- [Using an mTLS Certificate with OAuth 2.0 Authentication](/v1/docs/how-to-setup-an-mtls-certificate-with-oauth-20-authentication).
- [Generating a PFX Certificate Bundle for mTLS](/v1/docs/generating-a-pfx-certificate-bundle-for-mtls).