A tenant enabled VMware Identity Manager can only be accessed through tenant FQDNs scaling-out a tenant enabled VMware Identity Manager from a single node to a three node cluster behind a load balancer requires changes to its DNS and certificate requirements.
All the VMware Identity Manager tenant FQDNs must now point to the load balancer IP address instead of VMware Identity Manager a single node IP address. And VMware Identity Manager load balancer certificate must hold all the tenant FQDNs. For more information on Mandatory Certificates and DNS Requirements, see Multi-Tenancy Model.
The same recommendations are provided to you as a manual pre-requisite to select before scaling-out global environment VMware Identity Manager from vRealize Suite Lifecycle Manager UI. For more information on Tenant FQDNs, see Multi-Tenancy Model.