Hello **** Balás Botond Barna
In a typical WPA3 Enterprise Wi-Fi setup, users are generally required to authenticate using either a certificate OR a username/password, not both simultaneously. This is the standard behavior for most enterprise network configurations.
The process can be complex. You will need configure your RADIUS server to accept both methods and issue user certificates from your Active Directory. Set up the Network Policy Server (NPS) to allow dual authentication, create the necessary network policies, and configure your Wi-Fi access points to request both a certificate and a username/password during authentication.
Best regards,
Karlie Weng