title: Secure ASP.NET MVC application with SSL and client certificate authentication
body: <p>I'm looking to secure an ASP.NET MVC application with SSL and client certificate authentication. I'm using IIS 7.5, Windows Server 2008 R2.</p>
  
  <p>I'd like to know whether it's possible to do the following through Web.config (it has to be through there!)</p>
  
  <ol>
  <li>Require SSL communication for all requests</li>
  <li>Map multiple client certificates to a single user</li>
  <li>Require the user to be authenticated</li>
  </ol>
  
  <p>Also, any pointers on how to go on about doing this, any tutorials or other relevant resources will be much appreciated as I'm new to pretty much all of these things.</p>