If you have a LB in front of the SH(s), you can try to configure the splunk web fqdn in SAML configuration > Advanced Settings > "Fully qualified domain name or IP of the load balancer". This will configure the fqdn of the LB in authorize.conf.
... View more