Your customer requires a security solution where client credentials are used, not a Protected Access Credential (PAC), and the authentication server must have a certificate with optional client…

Your customer requires a security solution where client credentials are used, not a Protected Access Credential (PAC), and the authentication server must have a certificate with optional client certificate use. Which EAP (Extensible Authentication Protocol) method is the best fit for these requirements?