IIS Client Certificate Mapping Authentication

Hi All,

I am trying to get a better understanding of how IIS Client Certificate mapping authentication works in the runtime. While adding oneToOneMappings, we map a client certificate to User account. Does it mean that client gets authenticated and then impersonated to that User account?

I got this weird question because, when I try to set up authorization in web.config to allow only this user and deny other users, I always get UnAuthorized error. How to identify whether it is using the User account that is mapped to Client certificate or a different account? Any thoughts?

Thanks,

Pavan