Error connecting with certificate user via Powershell 'connect-safeguard': "400; Bad Request -- 0: Access denied" (4290696)

Using the built-in certificate provider of Safeguard, Safeguard has no way to connect to this LDAP end point, as it does  not allow anonymous connections.

Using the built-in certificate provider of Safeguard, Safeguard has no way to connect to this LDAP end point, as it does  not allow anonymous connections.

Review using one of the below options as a solution:

1. Modify the Certificate Services server so as to not include any CDP extension.   
2. Configure OCSP and only include a CDP to the HTTP location.  
3. Instead of using the built-in certificate provider of Safeguard, configure an Active Directory Identity and Authentication Provider and add users from Active Directory and require them to authenticate with a certificate.  When using the Active Directory provider and requiring certificate authentication, the CDP can point to either an LDAP end point or HTTP OCSP end point.  Safeguard has special code to handle this scenario and because the Active Directory Identity and Authentication Provider has service account credentials, Safeguard can use those to access the LDAP end point, if necessary