TLS Mutual Authentication for Azure App Service

Question

I've made a frontend using Azure Static web app (React). The backend is an Azure app service (a node REST API). I want to secure the backend so that the API is not accessible without a client certificate, so I turned on "client certificate mode required" in the app service settings. The problem is each time a user visits the frontend, the browser asks them to select a certificate. Is there any way around this so that the user does not have to select a certificate?

Answer 1

The problem is each time a user visits the frontend, the browser asks them to select a certificate.

• This happens if you have enabled/Allowed the authentication with client certificates.

Is there any way around this so that the user does not have to select a certificate?

• You can disable the setting in Azure Portal, if you don't want authenticated requests (by users) to select the certificate.

Go to the Azure Portal => Your Web App => Configuration => General Settings => Under Incoming client certificates , change the setting to Optional

• If you don't want to disable , even you can provide windows sign-in as authentication

TLS Mutual Authentication for Azure App Service

Please refer Configure TLS mutual authentication for Azure App Service and SO Thread