we have a scenario for implementing SSO using x.509 certificates. A secure client will download a x.509 certificate (only certificate...no private key is available) upon user logs into the windows machine. Henceforth for all web applications, we would like read this certificate for authenticating the user. when we tried for reading the browser certificates(by configuring tomcat to request client certificate), able to read only certificates with private key. not able to read the x.509 certificate put up by the secure client.
Can somebody help me to read the x.509 certificate from server side? Or only certificates with private key alone could be used for this purpose?