After using authenticating and authorizing users by using certificate.
Steps:
1. Config bindings, end points and server behavior as described in the
book.
2. Create client self-signed certificates.
3. Add client certificates into trusted people in mmc at IIS server.
4. Add certificate users "CN=Bert; thumbprint" to the aspnetdb with proper
roles.
5. Config IIS SSL settings to accept or ignore client certificates.