mTLS
In short: mTLS, mutual TLS, means both sides of a connection present certificates, so the server verifies the client as well as the reverse. For agents, mTLS can bind tokens to a certificate and prove workload identity. SPIFFE commonly issues the certificates.
Where does it show up in practice?
Descope supports mTLS.