In a web application, I have a WCF service uses Client Certificate authentication. I checked "Accept Client Certificate" in IIS - SSL Settings and it works fine. But some times, in some browsers, if a certificate is installed on the client machine, the browser is prompting a message to choose the certificate it wants to provide to the server which is not a desired behavior since only the web service needs the certificate - not the web application!.
How can I handle it without creating an independent web project for the web service on IIS?
Accept Client Certificate
on folder or file basis. So just put it on the files/folders that make up your service.Accept Client Certificate
only on the service files which are not directly accessed by the user.Accept Client Certificate
then the browsers will never know about it, except if you are using JavaScript on your pages to call the service.