When a user accesses a resource through ADFS from the Internet or other external network, the request is intercepted by the ADFS Proxy in the perimeter network, which then displays a webpage form prompting for usercredentials. The default
configuration on an ADFS proxy is FormBasedAuthentication, as this requires just the SSL port 443 to be exposed.