---
title: "POST /v1/{+parent}/backendAuthenticationConfigs"
method: POST
path: "/v1/{+parent}/backendAuthenticationConfigs"
tags: ["projects"]
---

# POST /v1/{+parent}/backendAuthenticationConfigs

`POST /v1/{+parent}/backendAuthenticationConfigs`

Creates a new BackendAuthenticationConfig in a given project and location.

## Path parameters

- `parent` string, required

## Query parameters

- `backendAuthenticationConfigId` string

## Request body

- BackendAuthenticationConfig — BackendAuthenticationConfig message groups the TrustConfig together with other settings that control how the load balancer authenticates, and expresses its identity to, the backend: * `trustConfig` is the attached TrustConfig. * `wellKnownRoots` indicates whether the load balance should trust backend server certificates that are issued by public certificate authorities, in addition to certificates trusted by the TrustConfig. * `clientCertificate` is a client certificate that the load balancer uses to express its identity to the backend, if the connection to the backend uses mTLS. You can attach the BackendAuthenticationConfig to the load balancer's BackendService directly determining how that BackendService negotiates TLS.
  - `trustConfig` string — Optional. A reference to a TrustConfig resource from the certificatemanager.googleapis.com namespace. This is a relative resource path following the form "projects/{project}/locations/{location}/trustConfigs/{trust_config}". A BackendService uses the chain of trust represented by this TrustConfig, if specified, to validate the server certificates presented by the backend. Required unless wellKnownRoots is set to PUBLIC_ROOTS.
  - `name` string — Required. Name of the BackendAuthenticationConfig resource. It matches the pattern `projects/*/locations/{location}/backendAuthenticationConfigs/{backend_authentication_config}`
  - `updateTime` string, google-datetime — Output only. The timestamp when the resource was updated.
  - `createTime` string, google-datetime — Output only. The timestamp when the resource was created.
  - `description` string — Optional. Free-text description of the resource.
  - `labels` object — Set of label tags associated with the resource.
  - `wellKnownRoots` 'WELL_KNOWN_ROOTS_UNSPECIFIED' | 'NONE' | 'PUBLIC_ROOTS' — Well known roots to use for server certificate validation.
  - `etag` string — Output only. Etag of the resource.
  - `clientCertificate` string — Optional. A reference to a certificatemanager.googleapis.com.Certificate resource. This is a relative resource path following the form "projects/{project}/locations/{location}/certificates/{certificate}". Used by a BackendService to negotiate mTLS when the backend connection uses TLS and the backend requests a client certificate. Must have a CLIENT_AUTH scope.

## Response `200`

Successful response

---

[API](https://skmtc.net/google/apis/networksecurity.md) · [All operations](https://skmtc.net/google/apis/networksecurity/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/google/networksecurity/versions/4afd54463fe6/schema)