In a web application, I have a WCF service uses Client Certificate authentication. I checked "Accept Client Certificate" in IIS - SSL Settings and it works fine. But some times, in some browsers, if a certificate is installed on the client machine, the browser is prompting a message to choose the certificate it wants to provide to the server which is not a desired behavior since only the web service needs the certificate - not the web application!.
How can I handle it without creating an independent web project for the web service on IIS?
Accept Client Certificateon folder or file basis. So just put it on the files/folders that make up your service.
Accept Client Certificateonly on the service files which are not directly accessed by the user.