X.509 Client Authentication

Getting advice
1

I’m trying to get OIDC authentication working using X.509 client certificates. Admittedly, I’m struggling a bit.

I’m using a Direct Grant Flow (I believe) - that is I have software running out in the field, that needs to access a service behind an API Gateway.

That said, I’m reading the section titled Adding X.509 Client Certificate Authentication to a Direct Grant Flow.

Step #11 is throwing me off. It reads:

  1. Set up the x509 authentication configuration by following the steps described in the x509 Browser Flow section.

Is this step truly necessary if I’m using a Direct Grant Flow? All of the steps?