Skip to main content

         This documentation site is for previous versions. Visit our new documentation site for current releases.      

Transport Layer Security (TLS) best practices

Updated on March 15, 2022

Select the proper TLS version when initiating outbound connections from Pega Platform to external servers and systems, for instance, when configuring authentication services, authentication profiles, and connectors.

TLS is a cryptographic protocol that provides communications security over a computer network. For outbound connections from Pega Platform, consider the following recommendations when choosing the lowest allowable TLS version for communicating with your identity provider or external application:

  • For applications built with Pega Platform version 8.7.2 and higher, select TLS 1.2 for outbound connections if the server supports TLS 1.2.
  • If you updated to Pega Platform version 8.7.2 or higher from version 8.4.6 or earlier, edit your rule form for outbound connections to use the appropriate protocol supported by your Pega application's underlying Java version. Pega has observed cases where some features, such as customer search, fail to work when the lowest allowable SSL/TLS version is set to 1.0.
  • Previous topic Testing login authentication services
  • Next topic Configuring login policies such as multi-factor authentication, CAPTCHA, and attestation

Have a question? Get answers now.

Visit the Support Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best. is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice
Contact us