InboundCertificate

Represents a mutual authentication certificate that is imported to your Salesforce org.

This type extends MetadataWithContent and inherits its fields.

InboundCertificate components have the suffix .inboundCertificate and are stored in the inboundCertificates folder.

InboundCertificate is available when the MutualAuthentication permission is enabled in your org.

Introduced in API version 49.0.

• Type: date
• Required: Yes
• Description: Required. The date on which the certificate expires.

• Type: string
• Required: Yes
• Description: Required. The certificate’s issuer.

• Type: string
• Required: Yes
• Description: Required. A friendly name that you create for the certificate. Limited to 64 characters.

• Type: string
• Required: Yes
• Description: Required. The serial number for the certificate.

The following is an example of an InboundCertificate component.

1<InboundCertificate xmlns="http://soap.sforce.com/2006/04/metadata">
2    <expirationDate>2021-02-04</expirationDate>
3    <issuer>C=USA,ST=CA,L=San Francisco,O=Salesforce.com,OU=00Dxx0000006Jm7,CN=newTestCert</issuer>
4    <masterLabel>TestMutualAuthCert2</masterLabel>
5    <serialId>29161320252531323757470546071624</serialId>
6</InboundCertificate>

The following is an example package.xml that references the previous definition.

1<?xml version="1.0" encoding="UTF-8"?>
2<Package xmlns="http://soap.sforce.com/2006/04/metadata">
3    <types>
4        <members>*</members>
5        <name>InboundCertificate</name>
6    </types>
7    <version>49.0</version>
8</Package>

To prevent simple impersonation from compromising security, you can require clients and servers to prove their identity to each other with a mutual authentication certificate.