How do I get the Initiated Signon Page for ADFS 3.0 to display for my new setup?

I am in the process of setting up my first ADFS on Server 2012 R2, but get a This Page Cannot Be Displayed

external domain: domain.com
internal domain: home.domain2.com
using split dns

I am using a standard SSL Cert from Godaddy: adfs.domain.com

When testing by going to: https://adfs.domain.com/adfs/ls/IdpInitiatedSignon.aspx I get a "This Page Cannot Be Displayed"

If I go to URL https://localhost/adfs/ls/IdpInitiatedSignon.aspx the page does display

I see this warning in the event log: The SSL certificate does not contain all UPN suffix values that exist in the enterprise. Users with UPN suffix values not represented in the certificate will not be able to Workplace-Join their devices.

I've added a A host record in dns where adfs = the ip of the adfs server.

What am I missing?  Do I need to add the local domain to my certificate?

I've been following this document: http://goodworkaround.com/node/53
LVL 1
ohmErnieAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
Use something like the developer tools in IE or Firefox's firebug to see the actual HTTP requests and replies. "This page cannot be displayed" is usually not SSL related, but usually there is a number code or a "more information" link to provide details of the error the browser encountered. Without more information, it is all speculation. If I had to guess, it is a DNS issue, either with how split DNS was setup or with a cached entry. But it is a guess in the dark at this point.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ohmErnieAuthor Commented:
It was a DNS issue.  I had an incorrect A record.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.