Federation Security Services Guide › Identify Consumers at a SAML 1.x Producer › Protect the Assertion Retrieval Service with Client Certificate Authentication (optional) › Use of Client Cert. Auth. with an IIS 5.0 Web Server

Use of Client Cert. Auth. with an IIS 5.0 Web Server

Client certificate authentication is not supported for IIS 5.0 Web servers at the producer/Identity Provider. However, it can be used on an IIS 5.0 Web server at the consumer/Service Provider to communicate with a non-SiteMinder producer/Identity Provider.

To work around this issue, use the IIS 5.0 Web server's client certificate functionality at the producer/Identity Provider and do not configure SiteMinder's client certificate functionality. If you apply this workaround, be aware that the CN portion of the certificate's DN value must contain the affiliate name value.