EPM System security should be able to verify the user credentials against a configured user directory. The user name in the user directory must match the identity provided through the personal 509 certificate that the client presents to the web server.
You configure user directories using Shared Services Console. See the Oracle Hyperion Enterprise Performance Management System User and Role Security Guide.