adfs exchange

eg1995 1,131

dears,
i have 2 2016 exchange servers configured in dag mode. external urls are not published. users can connect just internally.
the client recently asked to publish it externally using web app proxy.
i have seen that this needs an adfs server to be installed and maybe adcs server( not sure)
for the moment, we are not planning to have our root ca as for the exchange server we are using public certificates from go daddy.
my question is, as adfs and web app proxy needs certificates when installing and configuring can i use the same one of the exchange server??

second thing, the customer wants to deploy the wap in his dmz. does the wap needs to have a public ip?
can you advise on the procesure please
as i cant seen many details about these kind of deployments

regards,

Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee

2020-03-20T17:17:06.233+00:00

anon@userAanon@userranon@usereanon@USER anon@useryanon@useroanon@useruanon@USER anon@useruanon@usersanon@userianon@usernanon@userganon@USER anon@userWanon@userAanon@userPanon@USER anon@usertanon@useroanon@USER anon@userpanon@useruanon@userbanon@userlanon@userianon@usersanon@userhanon@USER anon@userOanon@userWanon@userAanon@USER ?anon@USER anon@userOanon@userranon@USER anon@useroanon@usertanon@userhanon@usereanon@userranon@USER anon@usersanon@usereanon@userranon@uservanon@userianon@usercanon@usereanon@usersanon@USER anon@usertanon@useroanon@useroanon@USER ?anon@USER
anon@userAanon@userranon@usereanon@USER anon@useryanon@useroanon@useruanon@USER anon@useruanon@usersanon@userianon@usernanon@userganon@USER anon@userAanon@userDanon@userFanon@userSanon@USER anon@userpanon@userranon@usereanon@user-anon@useraanon@useruanon@usertanon@userhanon@usereanon@usernanon@usertanon@userianon@usercanon@useraanon@usertanon@userianon@useroanon@usernanon@USER anon@useroanon@userranon@USER anon@userpanon@userlanon@useraanon@usernanon@usernanon@userianon@usernanon@userganon@USER anon@useroanon@usernanon@USER anon@userganon@useroanon@userianon@usernanon@userganon@USER anon@userpanon@useraanon@usersanon@usersanon@usertanon@userhanon@userranon@useroanon@useruanon@userganon@userhanon@USER ?anon@USER anon@USER
eg1995 1,131 Reputation points

2020-03-23T10:27:55.387+00:00

wap to publish owa and using adfs pre-authenticaiton.
can you advise on the deployment
thanks
Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee

2020-03-23T16:28:42.177+00:00

It is more of an Exchange thing then :) What about this document: https://learn.microsoft.com/en-us/exchange/clients/outlook-on-the-web/ad-fs-claims-based-auth?view=exchserver-2019