Document Details
App Service Web Configure Tls Mutual Auth
This page contains Windows bias
About This Page
This page is part of the Azure documentation. It contains code examples and configuration instructions for working with Azure services.
Bias Analysis
Detected Bias Types
windows_first
missing_linux_example
Summary
The documentation demonstrates a 'windows_first' bias by providing detailed ASP.NET Core and ASP.NET Web Forms (Windows-centric) code samples before other platforms, and by referencing Windows-specific request properties (e.g., HttpRequest.ClientCertificate) without equivalent Linux or cross-platform details. There is also a 'missing_linux_example' bias: the documentation does not show how to access the client certificate directly in a Linux-native environment (e.g., using NGINX/Apache on Linux), nor does it mention Linux command-line tools (such as OpenSSL) or Linux-specific configuration patterns for mutual TLS. All code samples assume the Azure App Service's forwarding of the certificate via the X-ARR-ClientCert header, which is platform-agnostic, but the narrative and ordering favor Windows/.NET scenarios.
Recommendations
- Add explicit examples or notes for configuring and validating client certificates in Linux-native environments, such as using NGINX or Apache as a reverse proxy in front of App Service (Linux), including relevant configuration snippets.
- Include Linux command-line examples (e.g., using OpenSSL) for generating, inspecting, and testing client certificates, alongside or before any Windows-centric tools.
- Reorder or balance the code sample sections so that Linux-friendly stacks (Node.js, Python, Java) are presented before or alongside Windows/.NET examples, or clarify that the order is not indicative of platform preference.
- Where Windows-specific properties or patterns are mentioned (e.g., HttpRequest.ClientCertificate), provide equivalent guidance for Linux or cross-platform frameworks, or clarify their applicability.
- Add a section or note about how mutual TLS works in App Service (Linux) and any differences in behavior or configuration compared to App Service (Windows), if applicable.
Create Pull Request
Scan History
| Date | Scan | Status | Result |
|---|---|---|---|
| 2026-01-14 00:00 | #250 | in_progress |
 Clean
|
| 2026-01-13 00:00 | #246 | completed |
Clean
|
| 2026-01-12 00:00 | #243 | cancelled |
Clean
|
| 2026-01-11 00:00 | #240 | completed |
Clean
|
| 2026-01-10 00:00 | #237 | completed |
Clean
|
| 2026-01-09 00:34 | #234 | completed |
Clean
|
| 2026-01-08 00:53 | #231 | completed |
Clean
|
| 2026-01-08 00:00 | #228 | cancelled |
Clean
|
| 2026-01-06 18:15 | #225 | cancelled |
Clean
|
| 2025-09-15 00:00 | #112 | completed |
Clean
|
| 2025-08-15 00:01 | #81 | cancelled |
Clean
|
| 2025-08-12 00:00 | #78 | cancelled |
Clean
|
| 2025-08-11 00:00 | #77 | completed |
Biased
|
| 2025-08-10 00:00 | #76 | completed |
Biased
|
| 2025-08-09 00:00 | #75 | completed |
Biased
|
| 2025-08-08 00:00 | #74 | completed |
Clean
|
| 2025-08-07 00:00 | #73 | completed |
Clean
|
| 2025-08-06 00:00 | #72 | completed |
Clean
|
| 2025-08-05 00:00 | #71 | completed |
Biased
|
| 2025-08-04 00:00 | #70 | cancelled |
Biased
|
| 2025-08-03 00:00 | #69 | completed |
Clean
|
| 2025-08-02 00:00 | #68 | cancelled |
Biased
|
| 2025-08-01 00:00 | #67 | completed |
Clean
|
| 2025-07-31 00:00 | #66 | completed |
Clean
|
| 2025-07-30 00:00 | #65 | completed |
Biased
|
| 2025-07-29 00:01 | #64 | completed |
Biased
|
| 2025-07-28 00:00 | #63 | completed |
Biased
|
| 2025-07-27 00:00 | #62 | completed |
Biased
|
| 2025-07-26 00:01 | #61 | completed |
Clean
|
| 2025-07-25 00:00 | #60 | completed |
Biased
|
| 2025-07-24 00:00 | #59 | completed |
Clean
|
| 2025-07-23 00:00 | #58 | completed |
Biased
|
| 2025-07-22 00:01 | #57 | completed |
Biased
|
| 2025-07-13 21:25 | #47 | cancelled |
Biased
|
| 2025-07-13 20:48 | #44 | cancelled |
Clean
|
| 2025-07-09 13:09 | #3 | cancelled |
Clean
|
| 2025-07-08 04:23 | #2 | cancelled |
Biased
|