PKI & SSO

I'm looking for a way to provide an SSO feature to my customers whom all have (or should have) PKI certificates.  Is there a way to extract their username from the cert, and if so how would I go about doing so?  I've seen that it can be done in Java and so believe it should be capable in .Net as well.

 Any help would be appreciated.

Thanks
...