I got a step further by using the following matchrule:
matchrule = <EKU>msScLogin
I'm now presented with a list of the certificates on the card. After I select one of
the identities I get a pin prompt, but that's as far as I get. When I enter the
correct pin code the result is a "Sorry, that didn't work. Please try
again.". I'm thinking the maprule is incorrect?
BR /Gary