STEP supports Transport Layer Security (TLS) with or without mutual authentication (mTLS) for outbound HTTP traffic. Since mTLS requires trusted certificates from both the server and the client, mTLS can be used instead of basic authentication for additional security.
STEP supports inbound mTLS on the Stibo Systems SaaS environment. Inbound mTLS is possible for on premise systems but requires custom development.