I'm one of the SAP administrators for our organization and we've got some internal web applications that use Kerberos for SSO. Now the powers that be would like some of these exposed on the Internet.

We have an upcoming effort to deploy ADFS and I'm looking into load balancing options, but more so for the WAF feature. Maybe this is unnecessary and Windows 2012 WAP will be sufficent in a DMZ, but ...