For remote access, you can use an authentication proxy. This may be a feature of your load balancer or a hosted service (e.g., Azure Application Proxy or Cloudflare Tunnel). The proxy challenges users before they access the Appshare PWA and customer services.
The authenticated state is typically maintained through HTTP-only cookies. These cookies are set by the authentication proxy, and the Appshare PWA is not aware of them. By default, a browser sends a cookie only to the same domain where it was set. This means the Appshare PWA hosting service and customer service must be on the same domain. This can be achieved in multiple ways.