Configure SAML 2.0 Service Provider services

Configure the WebLogic to act as a service provider in the SAML user authentication flow.

Procedure 

1. From the WebLogic Console left pane, select the Edit tree icon, Environment, Servers, and ProductionServer.

2. From the right pane:

   1. Select the Security tab, and the SAML 2.0 Service Provider tab.

   2. Select the Enabled option.

   3. Select the Always Sign Authentication Requests option.

   4. Select the Only Accept Signed Assertions option.

   5. Clear the Artifact Binding Enabled option.

   6. From Preferred Binding, select POST.

   7. In Default URL, set the root URL of WFO application (/wfo/control/signin).

      This step is only relevant for the IdP-initiated flow, in which the WebLogic Server instance uses this URL as the target URL.

3. Select Save.

4. From the Shopping cart icon, select Commit Changes.

5. Restart the WFO_ProductionDomain_ProductionServer service for this application server only.