You network contains an Active Directory domain named contoso.com.
The domain contains an Active Directory Federation Services (AD FS) server named ADFS1, a Web
Application Proxy server named WAP1, and a web server named Web1.
You need to publish a website on Web1 by using the Web Application Proxy.
Users will authenticate by using OAuth2 preauthentication.
What should you do first?
A.
On Web1, add site bindings.
B.
On Web1, add handler mappings.
C.
On ADFS1, enable an endpoint.
D.
On ADFS1, add a claims provider trust.
D is wrong as it’s relying party trust that is needed for WAP via OAuth.
https://docs.microsoft.com/en-us/windows-server/remote/remote-access/web-application-proxy/publishing-applications-using-ad-fs-preauthentication#BKMK_1.4
So C would be better.