<location path="SimpleApi" overrideMode="Allow">
    <system.webServer>
        <security>
            <authentication>
                <iisClientCertificateMappingAuthentication enabled="true" oneToOneCertificateMappingsEnabled="false">
                    <manyToOneMappings>
                        <add name="Authorized Access" description="Some long description" userName="SomeUser" password="[enc:AesProvider:removed:enc]">
                            <rules>
                                <clear />
                                <add certificateField="Subject" certificateSubField="OU" matchCriteria="Admin" />
                            </rules>
                        </add>
                    </manyToOneMappings>
                    <oneToOneMappings />
                </iisClientCertificateMappingAuthentication>
            </authentication>
        </security>
    </system.webServer>
</location>
<location path="SimpleApi">
    <system.webServer>
        <security>
            <access sslFlags="Ssl, SslNegotiateCert, SslRequireCert" />
        </security>
    </system.webServer>
</location>