azureazure-web-app-servicessl-certificatemutual-authentication

Azure Web App Mutual SSL authentication with client certificate in Azure App Service

I'm trying to set up mutual SSL authentication in an Azure Web App using a custom client certificate. I've configured the Azure Web App by switching the "Client certificate mode" to "Required" in the settings. However, when accessing the application, Azure provides a certificate instead of using our custom client certificate. We prefer not to utilize API Management and want to achieve this directly within the App Service.

Is there a way to configure the Azure Web App to accept our specific client certificate for mutual SSL authentication without going through API Management? Any guidance or steps on how to accomplish this within the App Service settings would be greatly appreciated.

Solution

  • After enabling the client certificate mode to require add setting WEBSITE_LOAD_CERTIFICATES = * to load all certificates or thumbprint of the certificate in Enviroment variables.

    enter image description here

    enter image description here

    For reference check this doc.

    OUTPUT:

    enter image description here

    enter image description here