Hi All
Please if you could help
Currently setting up a Web Application proxy to publish our CRM externally. The WAP is non domain server in our DMZ and we have only allowed Port 80 and 443 inbound/outbound from the WAP to the internal ADFS 3.0 server which is a domain joined server and a member of our AD domain.
Had to create a local DNS entry on our WAP server using the hosts file to our ADFS server (sts1.orgname.com) and was able to configure successfully the WAP role and publish applications.
I get the event ID 245 to prove this is the case:
"The federation server proxy successfully retrieved its configuration from the Federation Service 'sts1.orgname.com'.
However to publish CRM successfully externally some additional steps need to be completed regarding disabling URL translation and to perform this piece I need to open up powershell and run the Get-WebApplicationProxyApplication cmdlet. I run the same command as shown in this document
Get-WebApplicationProxyApplication Name* | Format-List replacing Name* with our own organization published apps name.
https://blogs.technet.microsoft.com/dynamicspts/2014/10/01/using-web-application-proxy-to-publish-dynamics-crm-2013-to-the-internet/
However for some reason in Powershell it doesn't recognize that command at all and I get the following error message:
Get-WebApplicationProxyApplication : Web Application Proxy could not connect to the AD FS configuration storage and
could not load the configuration. Make sure that the Web Application Proxy server can connect to the AD FS server, and
if not, run the Install-WebApplicationProxy command.
(0x80075213)
Now when I configured the WAP role I created a local user on the internal ADFS server and put this user in the 'administrators' group of the server and used this account to perform the initial authentication when configuring the WAP server under the WAP configuration wizard when it asks to enter the credentials of a local administrator account on the federation server.
Would this account be sufficient or would I need to create a domain account in our AD and add this user in the local administrators group on the ADFS server and then use this account to configure WAP?
Any help on this would be most appreciated
