The only way to implement dual authentication on a single URL would be to create
a custom Authentication provider that checked both authentication sources in its
validate method. This would then be implemented as a single Forms Based
authentication system. There is no way to configure a Web Application to make
use of two authentication mechanisms.