We use passive federation, the adfs-server is called MyADFS.MyInternalDomain and it is also exposed on the internet as myADFS.MyExternalDomain.com.
Everything works as expected when accessing it from the internet, but if I try to access
myADFS.MyExternalDomain.com from within MyInternalDomain, I get a query string of some 3-4000 characters, and the adfs webserver throws a "length of query string exceeds..".
Here's an example of the query-string.
What's up with all the %25-paddings in the query string?