If you have anything to do with Service Based Architecture or installing the Web Client, you'll want to read this. You don't need to memorize it, just remember where it is because it took me days to figure this out. It'll be on the Dynamics menu and the SBA menu, above.
The issue is the SSL cert that you have to use to get the Web Client to work. The two published approaches are to use a self-signed cert internally, or run a hosted approach and have GP on the public internet. Then you'd get a public IP and a public SSL cert, just like an eCom site would.
Today I'll walk you through an approach that uses an internal site (an intranet) and a public domain name and SSL Cert