Hello!

I found online many articles explaining how to set up client certificate authentication but all of them reference a CA created on the server.
What I need to do instead is control access to an NGINX server through a client certificate but leverage an on prem AD certification authority.
The user certificate will be distributed through AD. That I know how to do.
But what do I need on the server side?
An intermediate CA signed by my root CA?