My current setup is an application server in the DMZ with forms and web client setup for access externally through the web. The Licensing server is internal and the STS server on the application server points to this. I have enabled access to the repository and authentication through the mobile app by configuring the  'Directory Server STS URL' as the LFDS FQDN URL (to prevent errors in the config UI) and replace this with the application server STS in the config file later. This worked for the repository access but i am unable to log users into forms... 

When entering the forms server URL local to the application server i get the error shown below:

I thought this would be bypassed although when logging into forms through the app i get the following error in event viewer under Application...

Event code: 3005 
Event message: An unhandled exception has occurred. 
Event time: 6/10/2019 3:59:02 PM 
Event time (UTC): 6/10/2019 2:59:02 PM 
Event ID: 3f6a3774bad343ec80b4232a6c172f05 
Event sequence: 29 
Event occurrence: 1 
Event detail code: 0 
 
Application information: 
    Application domain: /LM/W3SVC/1/ROOT/LFDSSTS-1-132046523185418483 
    Trust level: Full 
    Application Virtual Path: /LFDSSTS 
    Application Path: C:\Program Files\Laserfiche\Directory Server\Web\WebSTS\ 
    Machine name: MACHINENAMEWASHERE
 
Process information: 
    Process ID: 11128 
    Process name: w3wp.exe 
    Account name: NT AUTHORITY\NETWORK SERVICE 
 
Exception information: 
    Exception type: RuntimeBinderException 
    Exception message: 'System.Web.Mvc.HandleErrorInfo' does not contain a definition for 'Message'
   at CallSite.Target(Closure , CallSite , Object )
   at System.Dynamic.UpdateDelegates.UpdateAndExecute1[T0,TRet](CallSite site, T0 arg0)
   at ASP._Page_Views_Home_ErrorPage_cshtml.Execute() in c:\Program Files\Laserfiche\Directory Server\Web\WebSTS\Views\Home\ErrorPage.cshtml:line 15
   at System.Web.WebPages.WebPageBase.ExecutePageHierarchy()
   at System.Web.Mvc.WebViewPage.ExecutePageHierarchy()
   at System.Web.WebPages.WebPageBase.ExecutePageHierarchy(WebPageContext pageContext, TextWriter writer, WebPageRenderingBase startPage)
   at System.Web.Mvc.ViewResultBase.ExecuteResult(ControllerContext context)
   at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass21.<BeginInvokeAction>b__1e(IAsyncResult asyncResult)
   at System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeAction(IAsyncResult asyncResult)
   at System.Web.Mvc.Controller.<BeginExecuteCore>b__1d(IAsyncResult asyncResult, ExecuteCoreState innerState)
   at System.Web.Mvc.Async.AsyncResultWrapper.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult)
   at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult)
   at System.Web.Mvc.Async.AsyncResultWrapper.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult)
   at System.Web.Mvc.Controller.EndExecute(IAsyncResult asyncResult)
   at System.Web.Mvc.MvcHandler.<BeginProcessRequest>b__5(IAsyncResult asyncResult, ProcessRequestState innerState)
   at System.Web.Mvc.Async.AsyncResultWrapper.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult)
   at System.Web.Mvc.MvcHandler.EndProcessRequest(IAsyncResult asyncResult)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

 
 
Request information: 
    Request URL: https://FORMSURLWASHERE:443/LFDSSTS/?wa=wsignin1.0&whr=urn:laserfiche:lfdsdb:LICENSINGSITENAMEWASHERE&fragment= 
    Request path: /LFDSSTS/ 
    User host address: 185.48.77.111 
    User: Test 
    Is authenticated: True 
    Authentication Type: Federation 
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
 
Thread information: 
    Thread ID: 7 
    Thread account name: NT AUTHORITY\NETWORK SERVICE 
    Is impersonating: False 
    Stack trace:    at CallSite.Target(Closure , CallSite , Object )
   at System.Dynamic.UpdateDelegates.UpdateAndExecute1[T0,TRet](CallSite site, T0 arg0)
   at ASP._Page_Views_Home_ErrorPage_cshtml.Execute() in c:\Program Files\Laserfiche\Directory Server\Web\WebSTS\Views\Home\ErrorPage.cshtml:line 15
   at System.Web.WebPages.WebPageBase.ExecutePageHierarchy()
   at System.Web.Mvc.WebViewPage.ExecutePageHierarchy()
   at System.Web.WebPages.WebPageBase.ExecutePageHierarchy(WebPageContext pageContext, TextWriter writer, WebPageRenderingBase startPage)
   at System.Web.Mvc.ViewResultBase.ExecuteResult(ControllerContext context)
   at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass21.<BeginInvokeAction>b__1e(IAsyncResult asyncResult)
   at System.Web.Mvc.Async.AsyncControllerActionInvoker.EndInvokeAction(IAsyncResult asyncResult)
   at System.Web.Mvc.Controller.<BeginExecuteCore>b__1d(IAsyncResult asyncResult, ExecuteCoreState innerState)
   at System.Web.Mvc.Async.AsyncResultWrapper.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult)
   at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult)
   at System.Web.Mvc.Async.AsyncResultWrapper.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult)
   at System.Web.Mvc.Controller.EndExecute(IAsyncResult asyncResult)
   at System.Web.Mvc.MvcHandler.<BeginProcessRequest>b__5(IAsyncResult asyncResult, ProcessRequestState innerState)
   at System.Web.Mvc.Async.AsyncResultWrapper.WrappedAsyncVoid`1.CallEndDelegate(IAsyncResult asyncResult)
   at System.Web.Mvc.MvcHandler.EndProcessRequest(IAsyncResult asyncResult)
   at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
   at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
   at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
 
 
Custom event details: 

and the following under WebSTS Operational 

Invalid URL for creating a WS-Federation message

LicenseManagerWebSTS.Infrastructure.Exceptions.InvalidWsFederationUrlException: Invalid URL for creating a WS-Federation message ---> System.IdentityModel.Services.WSFederationMessageException: ID3204: WS-Federation SignIn request must specify a 'wtrealm' or 'wreply' parameter.
   at System.IdentityModel.Services.SignInRequestMessage..ctor(Uri baseUrl, String realm, String reply)
   at System.IdentityModel.Services.WSFederationMessage.CreateFromNameValueCollection(Uri baseUrl, NameValueCollection collection)
   at System.IdentityModel.Services.WSFederationMessage.TryCreateFromUri(Uri requestUri, WSFederationMessage& fedMsg)
   at System.IdentityModel.Services.WSFederationMessage.CreateFromUri(Uri requestUri)
   at LicenseManagerWebSTS.Services.Utility.WsFederationUrlManager.CreateFederationMessageFromUri[T](Uri uri)
   --- End of inner exception stack trace ---
   at LicenseManagerWebSTS.Services.Utility.WsFederationUrlManager.CreateFederationMessageFromUri[T](Uri uri)
   at LicenseManagerWebSTS.Services.PassthroughSSOSessionService.ProcessSignIn(HttpContextBase httpContext, Uri url, ClaimsPrincipal user, ConfigurationData configurationData)
   at LicenseManagerWebSTS.Controllers.HomeController.GetSignInResult()
   at LicenseManagerWebSTS.Controllers.HomeController.Index()

Andy ideas? Thank you!