If you have configured your site to use HIGH TRUST – you must disable FORM Authentication and ENABLE Windows Authentication.  If this was a low trust environment you would do the opposite.

Now that AppManager has been installed you need to enable Windows Authentication by Disabling Anonymous Authentication.

From the Windows Start menu, right click on IIS, and “Run as administrator”.

Expand Sites, and Click on your site AppManager, and then double click on “Authentication” in the IIS section of the features in the center window.

High Trust Authentication Settings

• Verify/Change “Anonymous Authentication” set to “Disable”.
• Verify/Change “Forms Authentication” set to “Disable”.
• Verify/Change “Windows Authentication” set to “Enable”.

IMPORTANT: If you need to support the use of Internet Explorer or Edge browsers in a high trust environment, refer to the required additional settings in the section “Additional Steps Required for On-Premise IE Browser Support”

Low Trust Authentication Settings

• Verify/Change “Anonymous Authentication” set to “Enable”.
• Verify/Change “Forms Authentication” set to “Enable”.
• Verify/Change “Windows Authentication” set to “Disable”.

Make sure the Port 44301 is open for AppManager

From the Start menu select “Window Firewall with Advanced Security”.

Right click on “Inbound Rules”, and select “New Rule…”.

On the “New Inbound Rule Wizard select Port and then Next.

On the “Protocol and Ports” pane, select TCP and Specific local ports, enter port 44301 and click on Next.

On the Action pane select “Allow the Connection” and click on Next.

On the Profile pane, leave Domain, Private, and Public CHECKED.

Enter a Name and Desired Description for the New Run e.g. AppManager

Do an IISRESET in “SharePoint 2016 Management Shell”.

 

 

On your AppManager Server verify the Port ENDPOINT has been established

This example is from Azure

Select > on the left RAIL

Search for “Network Security Groups”

Select the Security Group your Server is in

Left Pane opens

Click Inbound security rules menu

On the “Inbound security rules” page select “+Add”

1. Enter a name for the Rule example HTTPS44301
2. Set the Port Range = 44301
3. SAVE