Windows 10: ADFS farm - Secondary server HTTP ERROR 400

Hello,I've been trying to create and ADFS farm for my org. I managed to create a standalone server with a wildcard certificate and it is behaving as expected. For redundancy, I wanted a second server in the farm that could handle the SAML requests if the primary server is down. So, I've added a second server to the existing farm. However, when I try to test sign in on the secondary server https://adfs-server-2.domain.com/adfs/ls/idpinitatedsignon.aspx I get the HTTP ERROR 400. I'm not sure what I missing. I have tried to go through quite a few MSDN articles and MS forums but to no avail.

:)

 

Upgrade OS for Windows Server 2019 and ADFS

Currently running a single Windows Server 2019 with ADFS.
I would like to upgrade the OS to version 20121, which I assume (?) would upgrade ADFS to version 4.
Is it as "simple" as performing an in-place upgrade?
I read several articles on upgrading an ADFS farm, which requires additional servers -

 

ADFS SSL Certificate

I have one ADFS primary server running on windows 2012r2, two secondary ADFS server, one runs on windows 2012r2, the other is windows 2016.

When I updated the SSL certificate on the primary ADFS, I can set-sslcertificate on secondary ADFS server which runs 2012r2 ok. But I cannot update the one on 2016 and it is still out of date. How can I update this certificate which runs on 2016?

Thanks in advance,

Lydia

 

Recommendation: Load balancer for ADFS environment?

We want to put in ADFS for our current network to support about 30K authenticated users, currently to start off just for sharepoint application, but potentially will support other application/ users as well.

Looking for recommendation on whether we should go with virtual or hardware based Load Balancer, and
which vendor of LB that people tend to adopt for their ADFS and WAP servers? Imagine we'll need to get the LB that can support Layer 7

Here is how we are currently spec'ed out so far:

• 2 WAP servers (Win2016) sit behind a LB and all on DMZ
• 2 ADFS servers (Win2016) sit behind another LB and all on Internal network
• DC server is on Internal network as well

----

Can anyone explain how the traffic/federation process goes (step by step) when user access the website from the internet (please include how request is being passed/redirect between webserver, WAP, ADFS, and DC servers)

Thanks!