Share via


Mapping Client Certificates Many-to-One

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1

Many-to-one mapping uses wildcard matching rules that verify whether a client certificate contains specific information, such as issuer or subject. This mapping does not compare the actual client certificate, but rather accepts all of the client certificates that fulfill the specific criteria. If a client gets another certificate containing all of the same user information, the existing mapping will work.

When using many-to-one mapping, keep the following information in mind:

  • Specific client certificate mappings always take precedence over wildcard mappings.

  • Some client certificates offer more identifying information and may contain additional custom subfields. For information about certificate formats, contact your certification authority.

This section includes the following information: