See A web app/API that calls web APIs: Code configuration to see what to change in the configuration file, and startup.cs. See also Using client certificates if you want to use certificates instead of ...