Hi, would like to seek some advice. I have a client who has currently setup LF Forms to authenticate using LFDS single sign-on, which resides on two different servers. The client is looking to release the Forms server for external use, so the users can log into Forms through the Internet externally. Now, since the Forms login gets redirected to LFDSSTS for authentication, does this mean that the LFDS server must also be accessible externally in order for the users to login? This is something that the client has stress they do not want they do as they prefer to keep the LFDS server internally. Can someone advise if they above is correct and if so, does anyone have any advise how we can go about setting up the infrastructure to achieve the above?

If this is not possible, then are we able switch back to using LF server for authentication instead? Which means that the users will have to give up on SSO and instead type their username and password. Thanks.