The web server requests for the client certificate. This triggers the browser to pop up a window for selecting a certificate that I already preinstalled.
Let us choose “Pam” who has the roles CEO and manager. Therefore, she should be granted access.
Walla! We are granted access.
Step b: Show only users without proper roles will be rejected.
To avoid cert caching in IE, let us close the IE and start another instance.