protected void verifyClientAuthentication() throws Exception {
    if (!SystemProperties.shouldVerifyClientCert()) {
      return;
    }

    log.trace("verifyClientAuthentication()");

    ClientId sender = requestSoap.getClient();
    IsAuthentication.verifyClientAuthentication(sender, clientCert);
  }