Recommendations

1- You must access the Web Console via a browser within a corporate network or with a correctly-configured VPN if your browser is outside the primary corporate network. This is important because you must be able to resolve and establish a connection to the internal FQDN, hostname, or IP address of the Web Console Server. Publicly-accessible configurations are possible, but require additional setup of firewalls, routers, and publicly-trusted certificates.

2- If you want multiple Web Consoles to support SSO, they must be in a load-balanced configuration. This is required because the configuration is part of the Authentication Service that is common to all Web Consoles. If you have multiple Web Consoles in a non-load-balanced configuration, you must choose one to use with SSO. You must specify which Web Console to use in the SSO configuration parameter Web Console Callback URL