ADFS Proxy Trust Issues

Web Application Proxy - ADFS

ADFS - Architecture 

Issues

Web Application Service not starting. When we try to manually start the service it gives this error

Open Event Viewer to check the issue in detail.

Here it says that Unable to retrieve proxy configuration data from the Federation Data.

The error results because the WAP server is unable to reinstate the trust between itself and ADFS Server.

So we configure the trust manually now.

Run the command in Powershell in WAP Server: dir Cert:\LocalMachine\My

This will give you the list of the certificates and their thumbprints.

Now you have to pick the thumprint corresponding to the Sub-Domain you are using

For-ex pick the thumbprint corresponding to sts.domain.com or *.domain.com

You can also copy the thumbprint from the certificate store in MMC by going to the certificate properties.

Copy the thumbprint and put it in this command

Install-WebApplicationProxy –CertificateThumbprint <cert-thumbprint-copied-paste-here> -FederationServiceName sts.domain.com

Run this command on the WAP Server, it will prompt you for the credentials.

Enter the ADFS Server Admin Credentials and wait for command to complete.

 Once it is complete, go to services and check whether it is started or not.

It must have started fine.