You can add a HostIdMappings extension to certificates you create for certain users, allowing you to specify the user IDs that each user will be able to use for login to particular servers (or hosts). Controlling an identity used for login purposes is a very important security objective. Therefore, you must exercise administrative control in the following areas by authorizing:

• PKI Services as a highly trusted certificate authority whose certificates will be honored when they contain HostIdMappings extensions
• Particular servers to accept logins from clients whose certificates contain HostIdMappings extensions