# Machine authentication -\> user authentication

**URL:** <https://discourse.mitmproxy.org/t/machine-authentication-user-authentication/1273>\
**Category:** help\
**Created:** [October 8, 2018, 10:13am UTC](https://discourse.mitmproxy.org/t/machine-authentication-user-authentication/1273 "2018-10-08T10:13:01Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Arn](https://avatars.discourse-cdn.com/v4/letter/a/ebca7d/32.png) [@Arn](https://discourse.mitmproxy.org/u/Arn)\
**Post date:** [October 8, 2018, 10:13am UTC](https://discourse.mitmproxy.org/t/machine-authentication-user-authentication/1273/1 "2018-10-08T10:13:01Z")

</div>

Hi folks!

How can mitmproxy be used to request and verify the machine certificate of the workstations starting a session initiation towards a web server outside the proxy, and letting the proxy rewrite this initiattion adding a username and password, as provided only to the web Proxy?

This is to enable certain user machines (iPads) in kiosk mode to hide the username and password from the users, still maintaining some Level of (machine) authentication on those iPads.

Best regards,

Arn.