# Multiple clientcert configuration

**URL:** <https://forum.search-guard.com/t/multiple-clientcert-configuration/2497>\
**Category:** Feature Requests\
**Created:** [March 28, 2024, 4:42pm UTC](https://forum.search-guard.com/t/multiple-clientcert-configuration/2497 "2024-03-28T16:42:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fbacchella](https://avatars.discourse-cdn.com/v4/letter/f/f14d63/32.png) [@fbacchella](https://forum.search-guard.com/u/fbacchella)\
**Post date:** [March 28, 2024, 4:42pm UTC](https://forum.search-guard.com/t/multiple-clientcert-configuration/2497/1 "2024-03-28T16:42:11Z")

</div>

I use two PKIs for authentication. One is from Active Directory and is used for real users, so I would like to resolve roles using LDAP. I have another one for technical accounts, which is not backed by LDAP for roles, and where I explicitly define user roles in the SG configuration. Therefore, I believe it might be interesting to add a key to filter client certificate configuration by the DN of the certification authority.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [April 18, 2024, 4:42pm UTC](https://forum.search-guard.com/t/multiple-clientcert-configuration/2497/2 "2024-04-18T16:42:46Z")

</div>

Closed on April 18, 2024, 4:42pm UTC

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.