Браузер > Blazor server > API: "сквозная" аутентификация Windows?

protected override async Task OnInitializedAsync()
{
    var state = await AuthStateProvider.GetAuthenticationStateAsync();
    _blazorUser = state.User.Identity?.Name; // DOMAIN\<MyWindowsUserName>
 
        
    var userInfo = await UserInfoService.GetUserInfo();
     _apiUser = userInfo.UserName; // IIS APPPOOL\<ApplicationPoolIdentity>
}

public async Task<UserInfo> GetUserInfo(WindowsIdentity windowsIdentity)
    {
        var roles = _roleMappingService.GetRoles(windowsIdentity).ToList();
        var userInfo = new UserInfo
        {
            Username = windowsIdentity.Name,
            Roles = roles,
 
        };
 
        return userInfo;
    }

    [HttpGet]
    public async Task<IActionResult> GetUserInfo()
    {
        if (User.Identity is not WindowsIdentity identity || !identity.IsAuthenticated)
            return Unauthorized();
        
        var userInfo = await _userInfoService.GetUserInfo(identity);
 
        return Ok(userInfo);
    }

 builder.Services.AddAuthentication(NegotiateDefaults.AuthenticationScheme)
    .AddNegotiate();

// HttpContext.User -> dump (вдруг там несколько удостоверений)
// HttpContext.User.Identity -> dump
// ((WindowsIdentity)HttpContext.User.Identity) -> dump