I am creating a user request account system that can use two different types of client certificates. As it stands now the user picks what certificate they want to send to the server.
The problem with this is one of the acceptable client certificates is more ideal then the other one. However they both can be accepted.
Here the question. Is it possible to configure iis7 to only promp for one certificate based on a rule and if that certificate is not available accept/prompt the other type. Alternatively if i could pull all the client certificates and use c# to decide which certificate to use could also solve my problem.