On a kind of related note, I'm trying to set up SAML for SmartConsole login (all on-prem, not cloud). When I create the Identity Provider, the Reply URL gives the 10.x.x.x IP of the SmartCenter. Is this normal?
To be fair I haven't tested yet, but the person setting up the Azure side refused to take the URL and said it has to be a public IP otherwise it will never reply back to the firewall. I've tried changing the Platform Portal IP, and the SmartCenter has a static NAT assigned, but I can't get it to populate the Reply URL with the NAT IP. Does anyone know how to change this? Or will it work if I insist the Azure person just uses the URL with 10.x.x.x in?
