Avatar of compdigit44
compdigit44
 asked on

ADFS 3.0 Proxy Enabled Endpoint

We have two internal ADFS 3.0 setup in a farm using a SQL DB. We also have two WAP servers in the DMZ. I noticed on our relaying party trust properties there is a tab for proxy enabled which I have been trying to read up on. I just want to be certain that our WAP are working and request are not going directly to the internal ADFS servers.
Active DirectoryWindows Server 2012SQL

Avatar of undefined
Last Comment
compdigit44

8/22/2022 - Mon
Mahesh

ADFS server will reject processing claims if they are appeared from WAP (internet) and not enabled on WAP (Proxy)
WAP itself do not have capability to identify and filter claims
If end point is enabled on ADFS level and blocked on WAP level, claim request will be processed for intranet and blocked from internet for  specific end point
compdigit44

ASKER
How can I see if wap is enabled or disabled for an end point. Also should the proxy enabled tab be populated? All of our end point have this tab empty.
compdigit44

ASKER
Does anyone have any addition thoughts on this?

Please...
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
ASKER CERTIFIED SOLUTION
Mahesh

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
compdigit44

ASKER
and if it is not enabled it goes direct to the backend ADFS servers? I am sorry but I am confused with this.