Server 2016 WAP a possible TMG replacement?

i started reading on web application proxy role on new server 2016 tp. bunch of our servers still running on server 2008 r2, want think moving our servers. biggest let down seems discussed heavily on internet replacing tmg.

funny part have tmg in our dmz zone behind our edge firewall (being couple palo alto next gen firewalls) have need..... except sad sad news pans don't reverse proxy... great utm! (besides amazing devices!)

so doing heavy research ad fs , wap whole. managed ad fs configured part on 2012 r2 dc in test enviroment, i've got of certs figured out, , dns , network location figured out, , test external users via replicated dmz zone (anything beyond nated public ip dmz ip).

currently our "pre-auth" http -> https redirected page pointing forums based auth webpage users enter user name , password , authenticated  via our other segregated domain (which has required trusts our internal corporate domain). ones authenticated our external based sharepoint site. segregated fe server sit behind tmg, , pans.

reading claims based , windows based auth wap... 

i don't how users providing creds in between steps 1 , 2.

" 1)the client attempts access claims-based application using web browser; example, https://appserver.contoso.com/claimapp/.

2)the web browser sends https request web application proxy server redirects request ad fs server."

since have no plans create actual partner ship trusts these users, happen work own companies , authenicated on remote systems in multiple ways (could be a domain based account, lcoal windows account, guest windows system, hecks user running ubuntu accessing our webpage).

so question is exactly how users authenticated when accessing our website, if i'm attempting use server 2016 wap's role?

is possible replacement for current setup, or going on head attempting to implement ad fs no plans federation?

hi,

>>so question is exactly how users authenticated when accessing our website, if i'm attempting use server 2016 wap's role?

users should asked credentials , credential authenticated adfs.

for question how adfs perform authentication, here article:

http://download.microsoft.com/download/0/4/a/04acf0b3-4b39-4dd1-86b5-ff0a6c110e9b/active_directory_federation_services.pptx

best regards,

---

steven lee please remember mark replies answers if , unmark them if provide no help. if have feedback technet support, contact tnmff@microsoft.com.

Windows Server  >  Management