We have a .net IIS vended application that users are required to authenticate. When accessing the application directly by external IP, the application prompts once for username and password and works normally. When accessing the application through Cloudflare, the application continuously prompts for authentication almost as if for every element on the page.
The authorization software should use the header Cf-Connecting-Ip in order to get the IP address of the connecting user. if this isn’t possible to alter the application, it might be possible to restore visitor IP addresses