To allow users to locate your web tier and optional load balancer, you must buy publicly resolvable names for these systems. Do the following:
Define a domain name, for example, mydomain.com
Define host names, for example, myhost.mydomain.com
Contact a Domain Name registrar, and register the domain name and associated host names.
Clients using Self-Service and risk-based authentication (RBA) must be able to resolve to the virtual host name using Domain Name System (DNS).
If your deployment has a load balancer, the virtual hostname must resolve to the public IP address of the load balancer.
If your deployment does not have a load balancer, the virtual hostname must resolve to the public IP addresses of each web tier.
Implementing Risk-Based Authentication
Troubleshooting the Authentication Test