External Authentication – Server Certificate Validation Modes

When configuring mTLS for an outbound endpoint, you can now choose how your server's certificate is validated. Keep pinning your server's leaf certificate (the default), or upload your certificate authority's self-signed root and any intermediates so that leaf certificate renewals no longer require a configuration update. The same options apply to the OAuth 2.0 token endpoint.

User Guide Reference: External Authentication