Trying to setup and test the Identity provider for SaaS on WSA 8.0.8. I have five WSAs and from what I have read in the documentation I need to configure the Identity Provider for SaaS on each appliance. This includes defining an Identity Provider Domain Name that is the same for each WSA, then a Identity Provider Entity ID which is unique for each WSA. I have generated a self-signed cert (for testing) and understand that I need to import that same cert on each appliance. For the domain name I'm using saas.domain.com. The help file indicates this domain name must be resolvable in DNS, but for what IP or IPs? If I'm supposed to use the same domain name for all appliances what IP do use for host record? Is it all the WSA IPs using round robin? Forgive the ignorance, but I've not set this up before and am not too familiar with SAML.
