
In Progress
Posted
Paid on delivery
I need clear, working guidance to configure Microsoft Entra header-based authentication on an IIS 10 web server that is hosting a simple HTML/JavaScript front-end. IIS is already setup on a Windows datacenter 2025 running in Azure. Scope My goal is for IIS to trust the claims it receives from Microsoft Entra, inject the expected headers, and pass them straight through to the static site. The result should be that any request reaching the content root already carries the user identity information so the JavaScript code can simply read the header or cookie without running its own sign-in flow. Key points you should cover • Correct installation/activation of the URL Rewrite or ARR modules if they are part of the recommended pattern. • Exact [login to view URL] entries (handlers, modules, customHeaders, outbound rules, etc.) required for header-based auth with Entra. • 4 claims / headers are already configures in entra. See attached image • Ways to test the configuration end-to-end, ideally a lightweight HTML page that echoes the incoming headers. • Guidance on any required TLS settings or additional hardening so the headers cannot be spoofed. Deliverables 1. A concise setup guide in Word containing every step from a clean Windows Server to a working solution. 3. Confirmation of success through a short screen-share or recorded demo showing a signed-in user and the expected headers visible in the browser’s network trace. Acceptance criteria • Request to /[login to view URL] must only succeed when Entra authentication has completed and the chosen claim (e.g. upn) is present in the forwarded header. • Refresh attempts or direct deep links should stay seamless without additional sign-in prompts once the session exists. • No changes allowed to the client codebase beyond reading the header. If you’ve implemented this exact pattern before on IIS 10, let me know – especially any quirks you encountered and solved.
Project ID: 40413450
92 proposals
Remote project
Active 56 mins ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs

Hello, I’ve read your Entra header-based authentication goal for an IIS 10 host serving a static HTML/JS front-end, and I’m confident I can deliver a clear, working setup end-to-end. With 15+ years in web/infra development and hands-on experience securing IIS deployments, I’ll provide a precise, production-ready guide that shows exactly how to trust Entra claims, inject the header values, and pass them through to the static site without altering client code. What you’ll get: a concise setup guide starting from a clean Windows Server, including the recommended modules (URL Rewrite and/or ARR) installation and activation, exact [login to view URL] entries (handlers, modules, customHeaders, outbound rules), TLS hardening recommendations, and end-to-end test pages that echo headers for verification. I’ll also cover how to prevent header spoofing and ensure retries or direct deep links stay seamless once authentication has established a session. Initial estimate: I’ve shared an initial estimate based on your description, and once we go over a few technical or functional details, I’ll confirm the exact cost and delivery schedule. Next steps: I’ll draft the Word setup guide and a lightweight HTML test page, then you can review. A short screen-share or recording to confirm a signed-in user with the expected headers visible in the browser’s network trace will be included. What is your preferred Entra tenant and the exact header names you want IIS to forward (e.g., upn, preferred_username
$75 USD in 3 days
8.1
8.1
92 freelancers are bidding on average $131 USD for this job

Hi there, Expert here, I’ll configure IIS to trust Entra claims and pass headers cleanly to your frontend, with full guide and test validation.,,,,,,,,,,Best Regards,,,,,,,,,,,,,,,,,,,
$145 USD in 1 day
6.7
6.7

With 12+ years of industry experience as a Full Stack Developer, I am extremely well-versed with your project requirements. I have a strong background in JavaScript and web security, which makes me apt for this task. Throughout my career, I have developed numerous secure web applications and have specialized in building reliable authentication systems. I am not only proficient in working with Microsoft technologies but have previously implemented header-based authentication on IIS 10. This familiarity with the exact pattern you described gives me an unique advantage as I understand the potential quirks that could arise and equip myself in mitigating them rapidly. My technical capabilities extend beyond just solving your problem at hand, but looking into future scalability and performance enhancements. My utmost endeavor would be to deliver a complete setup guide encompassing all the intricate steps involved to ensure smooth functioning of your website. Let's collaborate soon so that I can get started on providing you with exceptional work that meets all your expectations while ensuring the best user experience possible.
$100 USD in 3 days
7.1
7.1

Hello, I came across your IIS 10 Entra Header Authentication and I am very interested in working with you. I have reviewed your requirements and full understand the scope of expectations. I specialize in JavaScript, Web Security, IIS, HTML, Web Development, Microsoft Azure, and have successfully delivered similar projects before. I am committed to delivering high-quality work with reliability, clarity and professionalism. I work transparently throughout the project progress, deadlines and expectation stay clear at every stage. I would be glad to disucss further details and am ready to start immediately. Looking forward to hearing from you. Regards. Anum
$140 USD in 7 days
5.4
5.4

As a proficient cloud computing expert with a keen eye for security, I'm well-versed in dealing with client requests that require intricate security configuration. The specific experience you're seeking for your Azure-based IIS 10 server undertaking is one of my specialties. Over the years, I've honed my abilities to handle and maintain Windows data centers in Azure, enhance web server security ( including IIS) and effectively apply URL Rewrite or ARR modules.
$140 USD in 1 day
5.7
5.7

Hi, I would like to grab this opportunity and will work till you get 100% satisfied with my work. I just applied after read your job posting carefully and I believe that I am good fit to your project. I'm a serious bidder. I will satisfy you with my high skills! I am an expert which have 10+ years of experience on Mobile App Development, iPhone, User Interface / IA, PhoneGap, Mobile App Testing, Swift, Google Maps API, Web Development, iOS Development, Mobile Development I am looking forward to meet you to discuss the further detail about this project. Looking forward to hearing from you. Warm Regards
$140 USD in 2 days
4.9
4.9

With my extensive experience in full stack web development spanning over a decade, I possess deep knowledge of relevant tools and technologies for your project including HTML, JavaScript, and specific expertise in Web Security – which will prove vital in crafting a secure and efficient solution for your IIS 10 Entra Header Authentication needs. I have built various complex web applications using different frameworks like React.js, Node.js and PHP amongst others, giving me an edge when it comes to finding effective solutions for unique challenges. a lightweight HTML page testing criteria as well as fine-tuning any required TLS settings or additional hardening to prevent possible header spoofing. Let's collaborate now and bring this project successfully from concept to deployment. A smooth process is guaranteed given that my approach encompasses clear communication and minimal back-and-forth along with delivery on time without compromising quality. Give me the opportunity to prove myself through a short screen-share or recorded demo showing a signed-in user with the expected headers visible on the browser's network trace after successful implementation of Entra header-based authentication on IIS 10 web server hosting your simple HTML/JavaScript front-end project.
$100 USD in 3 days
5.1
5.1

Hello, I hope you’re doing well. I’ve set up this exact pattern before on IIS where Entra handles the auth and IIS simply receives trusted headers, so your static front end never needs its own sign in flow. I can give you a clean, step by step guide that starts from a fresh Windows Server and ends with IIS injecting the Entra claims into the request so your HTML and JavaScript can read them directly. That includes enabling the right IIS modules, adding the precise web config entries for handlers, modules, custom headers and outbound rules, and shaping the rewrite logic so only authenticated traffic reaches index.html. I can also show you how to test the flow with a tiny page that echoes the incoming headers and how to harden TLS and header handling so nothing can be spoofed. Once everything is in place, I’ll walk you through a short demo showing a signed in user and the expected headers in the browser network panel.
$140 USD in 7 days
4.4
4.4

We went through your project description and it seems like our team is a great fit for this job. IIS 10 Entra Header Authentication Please come over chat and discuss your requirement in a detailed way.
$30 USD in 2 days
4.5
4.5

With over a decade of full stack development experience and a proven track record in implementing agile methodologies, I feel more equipped than most to help you tackle the complex task of setting up Microsoft Entra header-based authentication on your IIS 10 server. My technological prowess spans across various back-end and front-end technologies, which are extremely crucial to achieve your desired goal. From my understanding, the Windows Server configuration is already set up on AZURE Datacenter 2025; this complements my knowledge of cloud-based systems like AWS. Throughout my career, I have thrived in challenging contexts and consistently delivered projects that meet client expectations. I have encountered similar authentication patterns before using IIS 10, and thus understand the potential quirks and complications involved. This not only saves time but also ensures a smooth trouble-shooting process if any issue arises during implementation. Finally, to ensure project success and your peace of mind, I am more than willing to provide a short screen-share or recorded demo confirming the efficacy of our solution.
$140 USD in 3 days
4.4
4.4

Hi, I can help you configure Microsoft Entra ID header-based authentication on your IIS 10 server, ensuring the integration works seamlessly with your static HTML/JavaScript front-end. Based on the image you shared, the key steps would be to: Configure Entra ID: Set the authentication mode to Microsoft Entra ID, as shown in the image. This will allow Entra to handle the claims securely. Set Up Headers: The GivenName, Surname, DisplayName, and UserName claims need to be configured in the headers as per the image. These will be passed to the server, where you can access them via IIS. Header Forwarding: I’ll ensure these headers are correctly forwarded through IIS, and that your server receives these claims. The headers will be injected into the request and passed through to the static content, so your JavaScript code can easily access the user identity. Security & Testing: Implement the appropriate authentication middleware to ensure only authenticated requests with valid claims are processed. After configuring, I will guide you through testing the setup by reviewing the headers in the network trace of the browser. Once configured, I’ll provide a step-by-step guide in Word with all instructions, as well as a demo to confirm the authentication flow works correctly. Let me know if you're ready to proceed, and I can start configuring it right away!
$150 USD in 3 days
4.2
4.2

Hello, I checked your project "IIS 10 Entra Header Authentication" and I already have a clear idea how to deliver this efficiently. I have solid experience in JavaScript, Web Security, IIS, HTML, Web Development, Microsoft Azure, and I’ve worked on similar projects where I delivered high-quality, scalable, and clean solutions. Why choose me? • Strong expertise in JavaScript, Web Security, IIS, HTML, Web Development, Microsoft Azure • Clean, optimized, and scalable code • Fast communication and daily updates • 100% focus on delivering results, not just code If needed, I can also suggest improvements to make your project even better. Let’s connect I’m ready to start right away. Best regards, Umer
$40 USD in 1 day
3.7
3.7

I have successfully implemented Microsoft Entra ID (formerly Azure AD) header-based authentication for several enterprise clients looking to modernize legacy IIS 10 applications without refactoring their core codebase. By leveraging the Microsoft Entra Application Proxy or specialized identity modules, I ensure that identity claims are securely mapped to HTTP headers, providing a seamless SSO experience while maintaining high security standards. My approach focuses on bridging the gap between Entra’s modern OIDC/SAML tokens and the header-driven requirements of your specific web server environment to ensure a stable and production-ready deployment. We will begin by configuring the Microsoft Entra App Registration to include the necessary optional claims and ensure the Application Proxy connector is properly installed and synced with your local network. To translate these identity claims into persistent headers IIS 10 can consume, I will configure the URL Rewrite and Application Request Routing (ARR) modules to map incoming claims into specific server variables or request headers. I will also verify the security of the setup by ensuring the IIS server only accepts traffic from the proxy or specific IP ranges, effectively preventing unauthorized header spoofing and maintaining a robust Zero Trust architecture. Finally, we’ll document the specific claim-to-header mapping—such as UPN, Email, or custom attributes—to ensure your backend application receives the exact data it expects for its session management and user profiling. Are you currently utilizing the standard Microsoft Entra Application Proxy, or are you looking to implement this through a third-party gateway like an F5 BIG-IP or Citrix ADC? I would also like to know if your application expects a specific header name for the authenticated user identity so I can precisely tailor the IIS rewrite rules to your specific environment requirements. I am available for a quick message exchange or a brief call to align on these technical specifics and get this identity solution configured for you immediately.
$189 USD in 21 days
1.4
1.4

Greetings I can surely help you for IIS 10 Entra Header Authentication I am in the IT industry since more than a decade and serve so many clients in building and rebuilding websites, software, and applications I have strong hands-on different cms like webflow, Wordpress, shopify, squarespace, wix and on different programming languages like PHP, Laravel, React, Node.js, HTML, CSS, And I did the migration from HTML to click funnels. I have made so many websites (E-commerce, WordPress, Classified admin, WooCommerce, etc.), bots, softwares, and Mobile applications (Android, IOS, and Huawei Play store) in my entire career. I have strong hands on both the front end and back end. Currently, I am part of the team who are dealing with miscellaneous tasks in dubizzle and Mzad Qatar including design and layouts and they both have more than 1 million users. I believe that you are looking for a web designer and for sure you will get your end desire result with plagiarism-free work and with better quality as I am assuring you this. Package deals can also be done for long-term collaboration as per the client's requirement. Kindly do come on chat so that we can discuss project details further more.
$30 USD in 2 days
1.0
1.0

With over 15 years of experience in web development, I have come across and resolved numerous quirks and complications, making your project less stressful. My expertise in JavaScript makes me well-suited for this specific set of tasks, as you seek to leverage a static HTML/JavaScript front-end with Microsoft Entra headers. I am fundamentally well-versed in configuring IIS on Windows Servers, particularly the necessary installations/activations, and correct adaptations of modules like URL Rewrite or ARR. What sets me apart in implementing your exact pattern is my dedication to delivering precise and concise setup guides. I will ensure every step from installation to working solution is thoroughly documented in a clear Word file. In addition, I can cap it off with a short screen-share or recorded demo to confirm a functioning session where your chosen claim is present and the headers visible as required. Coming from an Azure background, hardening security and setting up correct TLS settings to prevent header spoofing has always been paramount in my projects. With this understanding, I will help guarantee a safe environment for processing claims and headers. As someone who values effective communication just as much as quality workmanship, don't hesitate! Let's embark on this project together now!
$100 USD in 7 days
0.2
0.2

I’m a great match for this task. Your need for a clean, professional, and seamless configuration of Microsoft Entra header-based authentication on IIS 10, ensuring user identity headers are trusted and passed to your static front-end, is clear and achievable. I specialize in IIS configuration, URL Rewrite and ARR modules, and secure header management. While I am new to freelancer, I have tons of experience and have done other projects off site involving integrated, automated authentication setups and crafting detailed, user-friendly guides. I would love to chat more about your project! Regards, Zaheer Diedericks
$100 USD in 14 days
0.0
0.0

⭐ I handled a similar project ⭐, Happy to show you what works before you commit. A secure IIS 10 setup was built to trust Microsoft Entra claims and inject headers for seamless static site authentication. This aligns perfectly with your need to pass user identity to JavaScript without client-side login flows. The focus was on header-based authentication and seamless session management within IIS environments. Specializing in this area, I emphasize robust performance, securing headers against spoofing, and delivering polished, user-friendly solutions. Let’s chat for a free consultation to clarify your project—worst case, you walk away with a free consultation and a clearer understanding of your project. Kind regards, Curtley
$200 USD in 14 days
0.0
0.0

Lets chat, a free consultation and no obligation. I understand you need a clean, professional, and user-friendly solution for your "IIS 10 Entra Header Authentication" project. My skills in PHP, Java, JavaScript are a perfect fit for this project. While I am new to freelancer.com, my extensive experience delivers integrated, automated solutions. Regards, Jason McLachlan
$188 USD in 3 days
0.0
0.0

Hi, I’m a React developer experienced in creating modern, responsive, and user-friendly interfaces. I can build optimized frontend solutions with clean code and smooth performance.
$100 USD in 6 days
0.0
0.0

Hello there. I have implemented this type of setup multiple times. I understand you need clear, working guidance for Microsoft Entra header-based authentication on IIS 10, so your static HTML/JavaScript site receives trusted identity headers after sign-in. I can guide you step by step and ensure the setup works reliably end-to-end. Confirmation question: Are you using Azure App Proxy / Entra Application Proxy, or is Entra authentication handled directly before IIS in another way? If you choose me, I will deliver a fast and stable solution. Thank you for reading. Awais.
$30 USD in 1 day
0.0
0.0

Bangkok, Thailand
Payment method verified
Member since Nov 18, 2012
$50 USD
$100 USD
$50 USD
$150 USD
$50 USD
$30-250 USD
£10-20 GBP
$30-250 USD
$250-750 CAD
€30-250 EUR
$750-1500 USD
$250-750 USD
$15-25 USD / hour
$750-1500 USD
$8-15 AUD / hour
₹1500-12500 INR
$30-250 USD
$15-25 USD / hour
₹37500-75000 INR
$15-25 USD / hour
$30-250 USD
$30-250 USD
$10-30 USD
$10-50 USD
$10-30 USD