We have a trouble on one installation, we have configured according to the official documentation from Manage Engine, ADFS 3.0 with authentication protocol based on SAML 2.0, but users when launch a request to access the manage engine on demand site from the internet, the system does not reach  the ADFS 3.0 on a windows 2012 server on the client domain, the authentication protocol used is SAML 3.0.

From the intranet the manage engine site is reached with no problem.

is it necessary to activate a web application proxy as a feature on the windows server?

Please any suggestion will be appreciated.

Thanks in advance.

Francisco Villena