Mutual Authentication

I currently have keycloak v12 Prod & v14 QA configured for mutual authentication with certificate based authentication.
I have been looking at configuring Cognos Analytics to use keycloak for RBAC, but it does not support mutual authentication, it does support straight user/pass configuration. Which from my point of view is no different to using LDAP auth.

Is there a method to configure keycloak to be able to support mutual authentication and user/password off of the single instance?
Likewise anyone out there get recent versions of Cognos working with mutual authentication with cert auth happy to hear from you.