Wrote a guide
Mutual #authentication is a big component of zero trust cybersecurity. Setting up client certificates for all your end users may not be feasible, but mTLS between Pomerium and upstream services definitely is.

Check it out here.