What do you mean by "single client certificate": that you have one cert for all users or going to cert auth instead of LDAP/AD? If all users will have one cert, this will not work as there can only be one session per user (unless you are on 7.0 and have enabled multiple sessions and have the same number allowed as your license/expect to have iOS devices connected). This sounds like something that is not working in Pulse and you will need to work with JTAC on a fix (I can't say for sure right now as I don't have access to test; but will try to test and post when I am in the office tomorrow). Did you have this issue using Pulse 1.0? Or is this a new implementation completely? ... View more