Error Message from WAP Server:
Web Application Proxy received a request with a nonvalid edge token.
The token is not valid because it could not be parsed.
Error: Edge Token validation failed. Failed to serialize JSON object. Exception: The input is not a valid Base-64 string as it contains a non-base 64 character, more than two padding characters, or an illegal character among the padding characters. . Token:
eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IjhuZzVlUnd3dmdVdnUtaGxqaTJkSy13aFhVbyJ9.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.fyZ43WhJYOStpWWjH8WmamzdNxjrv4QLuGfdmqSh_6h3DUPvY3uJpPGkXFdSlUtvwEC4PTKhJXgPqjRofIkgtOgX_aWo2ijd_HBWJCfYUk0IVeprHdEhC71J-U814PgEarKl-jb5siOBw-2LNLd7vZ0fHJDUfiTZOfgI49gkaGe8uEAmAgMJ_XlvyE0cCvSjdFFIzYOTTiwglbgWyx8VJKAvbkogTjQ4E4edqEMNzwbO1C-sb0LvHH4kft8ME5xhDE5OqVJ9h2HcN4xcCWk61C2PD5SbT_45qFa-Dtt-l-zM3x_Sfn7UH5SfsA0XZJJNEiOIW98gWjJYfkFPZq_G7Q
Received token: eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiIsIng1dCI6IjhuZzVlUnd3dmdVdnUtaGxqaTJkSy13aFhVbyJ9.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.fyZ43WhJYOStpWWjH8WmamzdNxjrv4QLuGfdmqSh_6h3DUPvY3uJpPGkXFdSlUtvwEC4PTKhJXgPqjRofIkgtOgX_aWo2ijd_HBWJCfYUk0IVeprHdEhC71J-U814PgEarKl-jb5siOBw-2LNLd7vZ0fHJDUfiTZOfgI49gkaGe8uEAmAgMJ_XlvyE0cCvSjdFFIzYOTTiwglbgWyx8VJKAvbkogTjQ4E4edqEMNzwbO1C-sb0LvHH4kft8ME5xhDE5OqVJ9h2HcN4xcCWk61C2PD5SbT_45qFa-Dtt-l-zM3x_Sfn7UH5SfsA0XZJJNEiOIW98gWjJYfkFPZq_G7Q.
Details:
Transaction ID: {f9a02412-77a3-0001-efff-a3f9a377d201}
Session ID: {f9a02412-77a3-0001-efff-a3f9a377d201}
Published Application Name: Work Folders
Published Application ID: 1DA7581A-694B-3FF3-583D-B87562C4DD45
Published Application External URL: https://<domain>/
Published Backend URL: https://<domain>/
User: <Unknown>
User-Agent: MS_WorkFoldersClient
Device ID: <Not Applicable>
Token State: Invalid
Cookie State: NotFound
Client Request URL: https://<domain>/sync/1.0/capabilities
Backend Request URL: <Not Applicable>
Preauthentication Flow: PreAuthWindowsStoreApp
Backend Server Authentication Mode:
State Machine State: Idle
Response Code to Client: <Not Applicable>
Response Message to Client: <Not Applicable>
Client Certificate Issuer: <Not Found>
Response Code from Backend: <Not Applicable>
Frontend Response Location Header: <Not Applicable>
Backend Response Location Header: <Not Applicable>
Backend Request Http Verb: <Not Applicable>
Client Request Http Verb: GET
Environment:
ADFS installed on Windows 2012R2 Domain Controller fully patched with latest updates
WAP and WorkFolders installed on Windows 2016 member server, fully patched with latest updatesClient Machine(s) 1) Windows 10 Enterprise, fully patched 2) Windows 10 Enterprise with latest insider build (Feb 2017 preview)
Steps Taken to Build Environment:
I followed the TechNet article here to set this up https://technet.microsoft.com/en-us/library/dn747202(v=ws.11).aspx
Notes:We are migrating from WAP/WorkFolders on Windows 2012R2 to Windows 2016. This worked on Windows 2012R2, but in the lab I cannot get this to work on Windows 2016. I have gone through the technet article numerous times, and always end up at this error. The Win10 client machines are domain joined, not workplace joined. I have gone through numerous forums, including this one (and the links within): https://social.technet.microsoft.com/Forums/en-US/dc0b3fc7-3a72-48d2-a6bf-c6962dad968e/work-folders-adfs-web-app-something-missing?forum=winserver8gen
The ADFS cert is a publicly trusted cert, the workfolders cert is a self signed cert using the scripts from the TechNet article. ADFS is working as expected, so I think it's a problem with the WAP server. The above error occurs twice every 4 minutes on the WAP server.
It's all 1's and 0's in the end.