CA Certificates to AnyConnect Pinning

[DanielHood95543]

I'm using AnyConnect. I want to use certificates to authenticate multiple different user types (with Active Directory). I want to import three or four CAs, i.e. OrganisationACA, OrganisationBCA, OrganisationCCA and OrganisationDCA. And then have the users authenticate against three or four Active Directories. What stops a user from OrganisationA, with a certificate signed by OrganisationA use it with a user from OrganisationB to authenticate to OrganisationB profile? 

https://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/116111-11611-config-double-authen-00.html

[Mohammed al Baqari]

Not sure if I get the question, but if you want to limit users to their
organizations according to their certificates, you can use certificate
maps. This can map certs to group-policies so that users can't use them
with other organizations.

**** please remember to rate useful posts