How To Install And Configure Adfs On Windows Server 2016

Installing ADFS Proxy on Server 2016

Posted: January 4, 2022 in Windows Server

To enable AD FS for accessibility from exterior the corporate network,we can deploy 1 or more web awarding proxies for Advert FS. From Windows Server 2022 the role of a federation server proxy is handled by a new Remote Access role service called Web Application Proxy

Installing wildcard certificate

Web Application Proxy requres SAN SSL certificate,in this instance i used wilcard document

SAN certificate allows for multiple domain names to exist protected with a single certificate. For example, we install certificate for test.com, and and then add together more SAN values to have the aforementioned certificate protect examination.org, exam.cyberspace

Wildcard certificate allows for unlimited subdomains to be protected with a single certificate.Nosotros can use a wildcard certificate for the domain name test.com and that cert would besides work for post.test.com, ftp.exam.com and any other subdomain.

On server which will be Web Application proxy open MMC console-add Certificates snap-in-Local computer

Aggrandize Personal folder-right click Certificates binder-All tasks-Advanced operations-create custom asking

2-1

Proceed with enrollment policy

]

Choose (No Template) Legacy key

Expand Details and click Properties

On general tab set up domain proper noun

untitled

So click Subject tab and fill up the following:

CN-common name

C-Country

L-Locality

OU-Organizational Unit

O-Organization

Private Primal tab:

Cardinal options-Key Size 4096,check Brand individual key exportable

Cardinal type:Commutation

Salvage the request file

Browse to your internal CA spider web enrollment pages and click Request a document

Click advanced certificate request

Select the Submit a certificate asking link

Open up the previously created asking file in notepad and re-create all the data in it to clipboard.

By the clipboard into the Saved Request box

Select the web server template

Click submit

Download certificate

Get back to MMC snap-in,Right click the Certificates binder in the personal folder shop and select import

Browse for location of downloaded file,select Personal as Certificate Shop

Installing Web Applicaton Proxy function

In Roles check Remote Access:

Check Web Awarding Proxy

PowerShell:

Install-WindowsFeature Web-Application-Proxy -IncludeManagementTools

Configuring Web Application Proxy:

Enter ADFS server and local admin credentials

Select document

PowerShell:

Become SSL document thumbrint

dir Cert:\LocalMachine\My

Install-WebApplicationProxy -FederationServiceTrustCredential System.Management.Automation.PSCredential -CertificateThumbprint 'BD064CDA8DCB3FC62A907D550D0298A757760769' -FederationServiceName 'fs.test.com'