Cert Validation / Redirect for New Enrollment / Expired Certs

[jspanitz_]

This seems like a simple enough request yet I am having a terrible time finding an answer.  We issue certs to clients via a dedicated enrollment portal.  The user can then log in to our MAGs using either the web browser or Pulse.  All is good.

Now if the user doesn't have a cert or it is expired, we'd like to redirect them to the enrollment portal.  I would think this would be easy to achieve, yet it would seem like we are asking for the impossible.  Any thoughts on how to do this?   A nice guide or KB article would be a hoot.

[zanyterp_]

You can simulate this with custom sign-in pages by setting the URL in the deny message. Or look at custom messages for invalid certificate & redirect there