I'm trying to install Microsoft Dynamics CRM 2016 with IFD (Internet-Facing Deployment) and ADFS on the same server (Windows Server 2012 R2)
ADFS is running and seems to be working fine. I can fetch the metadata on https://sts.mydomain.com/FederationMetadata/2007-06/FederationMetadata.xml
I've configured Dynamics CRM IFD to use the following settings:
Web Application Server Domain: mydomain.com
Organization Web Service Domain: mydomain.com
Discovery Web Service Domain: discovery.mydomain.com
External domain where Internet-Facing servers are located: auth.mydomain.com
The problem starts when trying to setup the Relying Party Trust on ADFS.
When using the address https://auth.mydomain.com/FederationMetadata/2007-06/FederationMetadata.xml as the federation metadata address, it is fetching the wrong metadata.
It's fetching the ADFS metadata instead of the CRM metadata.
The only way to get this working is if I set a different port for the CRM endpoints, for example by appending :444 to the CRM IFD settings.
The problem with this configuration is that it would use non-standard HTTPS port 444 for the Dynamics CRM website and also during the Authentication phase using auth.mydomain.com:444
Is there any way to have both ADFS and Dynamics CRM running on HTTPS on port 443?