Ive got a scenario where multiple clients ( each with a different certificate) accesses our service. When returning a signed and encrypted response from the service i need to sign it with the client public key. As there could be numerous keys i dont want to hard code a certificate in the policy file. Is there any way to automatically pick up the x509 token from the request to use in signing the response. I can do this in code but need to be able to do it within a policy file.

WSE 2 x509 Certificates
Rob McGill