 id="toc" class="toc"></div><div id="doc-content"><h1>Setting up Secure Access Control</h1><p>This task shows how to securely control access to a service, using the service accounts provided by Istio authentication.</p><p>When Istio mutual TLS authentication is enabled, the server authenticates the client according to its certificate, and obtains the client’s service account from the certificate. The service account is in the <code>source.user</code> attribute. For the format of the service account in Ist