Error resolving principal name

[Cantor, Scott]

On 4/16/15, 11:22 AM, "Dave Perry" <Dave.Perry at hull-college.ac.uk> wrote:
>
>We are trying to deploy a v3 IdP behind forefront. Our admin is having issues making the port 8443 thing work at all.

You can't do that (and if you can, you really shouldn't). SPs using the back channel mostly rely on client authentication and that has to be end to end in most cases.

If you want to offload SSL, you really need to either get rid of the back channel or get any SPs to switch to message signing to authenticate requests.

-- Scott