Open Thunderbird -> [three line menu] -> Settings -> [search at the top] -> Config Editor

Once the editor is opened, you need to set the following (search for the option, and then change the value using the arrows on the right)

security.osclientcerts.autoload – True
network.http.windows-sso.enabled – True