Hi Arpita,
I have the same issue! Am using ADFS 3.0, CRM 2015, and WAP. Having the same issue with 404 on auth.mydomain.com after logging in from externally. Internal CRM URL and ORG URL work internally. Federationmetadata.xml resolves with both internal URL and ADFS URL. All internal DNS entries appear correct. All external DNS entries appear correct. Inside our network the Internal and External CRM URL works and the issue occurs only when access from outside network. However, if I type in https://auth.mydomain.com, internally, then I also get a 404.
Event viewer in CRM gives error Event ID 18732 only.
ADFS Server event viewer gives Event ID 364 -
Encountered error during federation passive request.
Additional Data
Protocol Name:
wsfed
Relying Party:
https://<organizationurl>.<mydomain>.com/
Exception details:
Microsoft.IdentityServer.Web.InvalidRequestException: MSIS7042: The same client browser session has made '6' requests in the last '11' seconds. Contact your administrator for details.
at Microsoft.IdentityServer.Web.Protocols.PassiveProtocolHandler.UpdateLoopDetectionCookie(WrappedHttpListenerContext context)
at Microsoft.IdentityServer.Web.Protocols.WSFederation.WSFederationProtocolHandler.SendSignInResponse(WSFederationContext context, MSISSignInResponse response)
at Microsoft.IdentityServer.Web.PassiveProtocolListener.ProcessProtocolRequest(ProtocolContext protocolContext, PassiveProtocolHandler protocolHandler)
at Microsoft.IdentityServer.Web.PassiveProtocolListener.OnGetContext(WrappedHttpListenerContext context)
I have been going around in circles for days just on this problem.
Has anyone resolved this issue??
Additoinal Information:
I have one Internal CRM Server, separate SQL server, a separate internal ADFS Server and a WAP Server in DMZ - using Kerberos.
Internal DNS = auth, dev, orgname and internalurl are all CNAMEs pointing to single Internal CRM server. FS is an A Record pointing to ADFS server IP and not a CNAME.
External DNS - auth, dev, orgname and fs all point to one external IP address as A Records. My Firewall routes all traffic from this external IP to my WAP server in the DMZ. DMZ uses hosts file for internal addresses to ADFSURL, ADFS Server, InternalCRMURL and ExernalCRMURL pointing to internal CRMServerIP.
If I add authURL pointing to internalCRM Server IP, external login goes into a loop between auth and adfs!
All Published Web Applications show same External URL and Internal URL once published and all set to Pass-through. Could this be the issue?