Windows authentication prompts when after sing-in CRM 2016 ADFS Idle time…

Hi,

I sing-in the extranal IFD access by ADFS3.0.

In idle time..3 hours for wait..

Windows authentication prompts(pop-up) will appear.

Try type user and userpassword into Windows authentication prompts..but can not re-sing-in it.

I think that should sing-in ADFS web authentication page,not Windows authentication prompts(pop-up)..

I try it..

IIS>AppPool>CRMAppPool>Advanced Settings>LoadUserProfile=True.

Or focus on the permissions on the temp folder

Refer the link below,

blogs.msdn.microsoft.com/.../windows-authentication-prompts-when-accessing-dynamics-crm-2011-ifd-external-url

but it did not change.

so,I checked the DNS records for orgname.crm.com and dev.crm.com are accessible externally.

I checked global DNS records

124.219.xxx.xxx⇒GIP is OK.

Mapping to(CNAME)

mycrm.co.jp ⇒124.219.xxx.xxx

auth.mycrm.co.jp ⇒mycrm.co.jp(CNAME)
orgname.mycrm.co.jp ⇒mycrm.co.jp(CNAME)
dev.mycrm.co.jp ⇒mycrm.co.jp(CNAME)
sts.mycrm.co.jp ⇒mycrm.co.jp(CNAME)

4 A-Recodes for same GIP.

And,I checked internal access DNS for my AD DNS.

Mapping to 3(CNAME) and 1(A-Recode)

auth.mycrm.co.jp ⇒CRM FrontEnd(CNAME)
orgname.mycrm.co.jp ⇒CRM FrontEnd(CNAME)
dev.mycrm.co.jp ⇒CRM FrontEnd(CNAME)
sts.mycrm.co.jp ⇒ADFS LB(VIP)(A-Recode)

I have WEB Proxy(Remote Access feature) Web Application Proxy.

Added 3 sites in my WAP.

https://auth.mycrm.co.jp
https://orgname.mycrm.co.jp
https://dev.mycrm.co.jp

[Ref]

https://blogs.technet.microsoft.com/dynamicspts/2014/10/01/using-web-application-proxy-to-publish-dynamics-crm-2013-to-the-internet/

The Global-IP is mapping to my router. The router(WAN) is mapping to WAP(Lan IP)..

I try change OS ver for ADFS ver..But I sitll have this issue..help me..very thanks!