diff --git a/cmd/customer-2315/main.go b/cmd/customer-2315/main.go
index 35c4144be20..576f0b0ec64 100644
--- a/cmd/customer-2315/main.go
+++ b/cmd/customer-2315/main.go
@@ -138,23 +138,8 @@ func (ps *ProxyServer) getAccessToken() (string, error) {
 	return token, nil
 }
 
-func (ps *ProxyServer) validateApiKey(req *http.Request) bool {
-	proxyAccessToken, err := ps.readSecretFile("/run/secrets/proxy_access_token")
-	if err != nil {
-		return false
-	}
-	incomingAccessToken := req.Header.Get("Api-Key")
-
-	// Compare the incoming Api-Key with the environment variable
-	return incomingAccessToken == proxyAccessToken
-}
-
 func (ps *ProxyServer) handleProxy(w http.ResponseWriter, req *http.Request) {
 	target := ps.azureEndpoint.ResolveReference(req.URL)
-	if !ps.validateApiKey(req) {
-		http.Error(w, "Invalid Proxy Password", http.StatusUnauthorized)
-		return
-	}
 	// Create a proxy request
 	proxyReq, err := http.NewRequest(req.Method, target.String(), req.Body)
 	if err != nil {
@@ -232,8 +217,8 @@ func main() {
 	ps.initializeAzureEndpoint()
 	go ps.updateAccessToken()
 	http.HandleFunc("/", ps.handleProxy)
-	logger.Info("HTTPS Proxy server is running on port 8443")
-	if err := http.ListenAndServeTLS(":8443", "/run/secrets/cert.pem", "/run/secrets/key.pem", nil); err != nil {
-		logger.Fatal("Failed to start HTTPS server: %v", log.Error(err))
+	logger.Info("HTTP Proxy server is running on port 8080")
+	if err := http.ListenAndServe(":8080", nil); err != nil {
+		logger.Fatal("Failed to start HTTP server: %v", log.Error(err))
 	}
 }
diff --git a/cmd/customer-4512/main.go b/cmd/customer-4512/main.go
index dac53b15b03..766ee554b00 100644
--- a/cmd/customer-4512/main.go
+++ b/cmd/customer-4512/main.go
@@ -124,23 +124,8 @@ func (ps *Proxy) getAccessToken() (string, error) {
 	return accessToken, nil
 }
 
-func (ps *Proxy) validateApiKey(req *http.Request) bool {
-	proxyAccessToken, err := ps.readSecretFile("/run/secrets/proxy_access_token")
-	if err != nil {
-		return false
-	}
-	incomingAccessToken := req.Header.Get("Api-Key")
-
-	// Compare the incoming Api-Key with the environment variable
-	return incomingAccessToken == proxyAccessToken
-}
-
 func (ps *Proxy) handleProxy(w http.ResponseWriter, req *http.Request) {
 	target := ps.azureEndpoint.ResolveReference(req.URL)
-	if !ps.validateApiKey(req) {
-		http.Error(w, "Invalid Proxy Password", http.StatusUnauthorized)
-		return
-	}
 	// Create a proxy request
 	proxyReq, err := http.NewRequest(req.Method, target.String(), req.Body)
 	if err != nil {
@@ -212,8 +197,8 @@ func main() {
 	ps.initializeAzureEndpoint()
 	go ps.updateAccessToken()
 	http.HandleFunc("/", ps.handleProxy)
-	logger.Info("HTTPS Proxy server is running on port 8443")
-	if err := http.ListenAndServeTLS(":8443", "/run/secrets/cert.pem", "/run/secrets/key.pem", nil); err != nil {
-		logger.Fatal("Failed to start HTTPS server: %v", log.Error(err))
+	logger.Info("HTTP Proxy server is running on port 8080")
+	if err := http.ListenAndServe(":8080", nil); err != nil {
+		logger.Fatal("Failed to start HTTP server: %v", log.Error(err))
 	}
 }
diff --git a/internal/completions/client/azureopenai/openai.go b/internal/completions/client/azureopenai/openai.go
index 6c411158adc..5630850aa8b 100644
--- a/internal/completions/client/azureopenai/openai.go
+++ b/internal/completions/client/azureopenai/openai.go
@@ -83,7 +83,17 @@ func GetAPIClient(endpoint, accessToken string) (CompletionsClient, error) {
 
 	var err error
 	if accessToken != "" {
-		credential := azcore.NewKeyCredential(accessToken)
+		var credential *azcore.KeyCredential
+		// Note: HTTP connection can be useful if customers need to run e.g. an auth proxy
+		// between Sourcegraph and their Azure OpenAI endpoint.
+		// The Azure client will prohibit sending HTTP requests if the request would contain
+		// credentials, so we remove credentials if the admin's intention is to send HTTP
+		// and not HTTPS.
+		if strings.HasPrefix(endpoint, "http://") {
+			credential = nil
+		} else {
+			credential = azcore.NewKeyCredential(accessToken)
+		}
 		apiClient.client, err = azopenai.NewClientWithKeyCredential(endpoint, credential, clientOpts)
 	} else {
 		var opts *azidentity.DefaultAzureCredentialOptions
@@ -91,13 +101,16 @@ func GetAPIClient(endpoint, accessToken string) (CompletionsClient, error) {
 		if err != nil {
 			return nil, err
 		}
-		credential, credErr := azidentity.NewDefaultAzureCredential(opts)
-		if credErr != nil {
-			return nil, credErr
-		}
 		apiClient.endpoint = endpoint
-
-		apiClient.client, err = azopenai.NewClient(endpoint, credential, clientOpts)
+		if strings.HasPrefix(endpoint, "http://") {
+			apiClient.client, err = azopenai.NewClient(endpoint, nil, clientOpts)
+		} else {
+			credential, credErr := azidentity.NewDefaultAzureCredential(opts)
+			if credErr != nil {
+				return nil, credErr
+			}
+			apiClient.client, err = azopenai.NewClient(endpoint, credential, clientOpts)
+		}
 	}
 	return apiClient.client, err