The firefox browser does not prompt to select a valid user client authentication certificate (stored in the Windows cert store under Personal User certs) for access to sites. This means the browser can not be used for certificate based MFA.

Changing the browser to use system certs (security.enterprise_roots.enabled = True) does not help resolve the issue