The authentication is based on mutual TLS and requires all users to request using an X.509 certificate. Type SECURITY_CONSTRAINT