Use the RequireHttpsAttribute in GlobalFilters and turn on SSL for IIS Express, because we want to make use of our SSL Certificate for which we paid .