Configuring F5 to reliably request pin when CAC card certificate selected

To understand your configuration: Do you have an APM profile assigned to the VIP that is supporting the application in question?

---------------

-If the users are internal only, on the same domain as the application, you are accessing the site via Kerberos or NTML.

-you can verify via Powershell by typing the following:

> klist

*Press Enter

-Below is an example of what you will see:

#1 will be the SPN / URL of the application or site you are accessing.

-Example site: fimportal.corp.contoso.com