If a proxy is used that isn't IIS or Azure App Service's Application Request Routing (ARR), configure the proxy to forward the certificate that it received in an HTTP header. In Startup.Configure, add the following code before the call to app.UseAuthentication();: