Certificate Authentication for domain users

Hello,

is it possible in SPP to import a user from Active Directory and set certificate as Authentication Provider? 

That's because:

- if I set Local as Identity Provider, I can then select Certificate as Authentication Provider

- if I select the AD domain as Identity, I no more see Certificate in Authentication Provider as an option

Thank you