topic Re: Panorama HA in General Topics

Panorama HA

S.Williamson — Mon, 10 Feb 2025 18:11:39 GMT

If I have an HA pair of panorama servers and I access each one with different URL (panorama01.domain.com and panorama02.domain.com) but I want to setup SAML Admin UI within Azure Enterprise applications, do I need to setup one for each panorama or when panorama01 fails does the 02 node take the name of the previously active one? Essentially I would be accessing panorama01.domain.com but it would direct me to the secondary active unit?

Re: Panorama HA

JayGolf — Wed, 12 Feb 2025 06:30:27 GMT

Hi @S.Williamson ,

You can use one Azure Enterprise application and add a second entry of yourpanorama01.domain.com for the Entity ID and ACS URL. Here is a similar discussion.

Re: Panorama HA

reaper — Wed, 12 Feb 2025 10:47:30 GMT

add a second entry in the Identifier and Reply URL sections of your enterprise application Basic SAML Configuration

don't worry about the sign-on URL

Re: Panorama HA

S.Williamson — Wed, 19 Feb 2025 15:36:25 GMT

what is the purpose of the "sign-on URL" portion of the configuration?