---
title: Advanced Endpoint Authentication
---
# Advanced Endpoint Authentication

Svix supports advanced endpoint authentication methods that can be used by your customers on top of the standard signature verification.

<Callout type="info">

These are advanced methods that are not required to keep your webhooks secure, but your customers might need them for their use case.
Read the [security docs](/security) for more information.

</Callout>
## Enabling OAuth and mTLS

OAuth and mTLS can be enabled at the environment level in the [Svix Dashboard](https://dashboard.svix.com/settings/organization/general-settings).

![Enable Endpoint Authentication](/img/endpoint-authentication/endpoint-authentication-enable.png)

When enabled, your users will see an option in the [App Portal](/app-portal) to configure the respective authentication method on their endpoints.

![Endpoint Authentication Configure](/img/endpoint-authentication/endpoint-authentication-configure.png)

## OAuth
To configure OAuth, your users will need to enter a `Client ID` and the `Authorization Server URL`, as well as the rest of the OAuth parameters, depending on the desired `Grant type` and `Authentication method`.

![OAuth Authentication](/img/endpoint-authentication/endpoint-configure-oauth.png)

## Mutual TLS (mTLS)

With mTLS, your users can upload a private PEM encoded private key and certificate, which will be used to sign the requests sent to the endpoint, and to verify the identity of the receiving server.

![Mutual TLS Authentication](/img/endpoint-authentication/endpoint-configure-mtls.png)

For self-signed certificates, a custom Certificate Authority certificate can also be specified.