I have an ISA server in a Windows domain (in a DMZ), and I'd like to publish a web server from inside our internal network.
I need to get ISA to authenticate a user based on a client certificate as well as using basic authentication against an Active Directory user account. Two-factor, I guess. How can I make that happen?
P.S - There is no trust between the domains (so no auth delegation), and I can't do authentication from the internal domain anyway (so no direct authentication). The web server doesn't care who's accessing it, as long as they're authenticated on the ISA server.
