Popular choices are RADIUS and Active Directory LDAP. Tying the user’s digital certificate together with their username/password is the next step to creating our two-factor authentication solution.