SP Migration to New Server

[Peter Schober]

Brett Melling <brett.melling at exprodo.com> [2024-07-01 19:51 CEST]:
> I don't recall the error but I didn't persist with it as I was sure - given
> all the 'traffic' taking place in an SSO exchange - that DNS would be used
> for more than the 'first hop'. But your answer suggests not

Right. Ordinarily in SAML 2.0 WebSSO everything is mediated by the
subject's web browser, meaning you'd only need to manipulate the
resolver on the machine the browser runs on to point elsewhere for a
given host name.
I can't speak to what else might be going on in your deployment might
but the workaround would be the same: Manipulate more local resolvers.
HTH,
-peter