Hello, I have created a Certified Endpoint scenario as described in http://blogs.technet.com/b/ben/archive/2013/03/05/certified-endpoints-in-uag.aspx where the client certificate check is done after the user has logged on to the portal. I was wondering if it is possible (i.e. using a TMG web listener) to do client certificate check before the client is presented with the UAG logon screen (like a two factor authentication). I would like to use this scenario because my uag server is going to be exposed to the internet and I don’t like everyone to brute forcing user names and passwords to my server/domain trying to get access.
Thank, you.