I have a use case with a local domain (files) that requires a one-to-many relationship between a Linux user account and alternate smartcard token user names, i.e., I have multiple users with individual smartcards that need to be able to authenticate to a single Linux user account. Based on the sssd documentation and my observation, the sssd.conf file only matches the last matchrule supplied. This appears to force a one-to-one relationship between a Linux user account and a smartcard token user name. Is there a way to create a matchrule (or rules) that will allow the use of multiple smartcards with a single Linux user account? Thanks.