Lookup String Syntax The partner lookup string has the following syntax:

Configuring WebLogic Security Providers 4-19 ■ Contain a partner lookup string, which is required at run time by WebLogic Server to discover the Service Provider partner for which a SAML 2.0 assertion needs to be generated. The partner lookup string specifies an endpoint URL, which is used for partner lookup and can optionally also serve as an Audience URI restriction that is included in the generated assertion. The ability to specify a partner lookup string that is also an Audience URI eliminates the need to specify a given target URL twice: once for lookup, and again for audience restriction.

4.11.2.1.1 Lookup String Syntax The partner lookup string has the following syntax:

[target:char:]endpoint-url In this syntax, target:char: is a prefix that designates the partner lookup string, where char represents one of three special characters: a hyphen, plus sign, or asterisk -, +, or . This prefix determines how partner lookup is performed, as described in Table 4–8 . Note: You must configure a partner lookup string for a Service Provider partner so that partner can be discovered at run time by the web service run time. Table 4–8 Service Provider Partner Lookup String Syntax Lookup String Description target:-:endpoint-url Specifies that partner lookup is conducted for an exact match of the URL, endpoint-url. For example, target:-:http:www.avitek.com:7001myservermyserviceconte xtmyservice-endpoint specifies the endpoint that can be matched to this Service Provider, for which an assertion should be generated. This form of partner lookup string excludes the endpoint URL from being added as an Audience URI in the generated assertion. target:+:endpoint-url Specifies that partner lookup is conducted for an exact match of the URL, endpoint-url. Using the plus sign + in the lookup string results in the endpoint URL being added as an Audience URI in the assertion generated for this Service Provider partner. target::endpoint-url Specifies that partner lookup is conducted for an initial-string pattern match of the URL, endpoint-url. For example, target::http:www.avitek.com:7001myserver specifies that any endpoint URL beginning with http:www.avitek.com:7001myserver can be matched to this Service Provider, such as: http:www.avitek.com:7001myservercontextAendpointA and http:www.avitek.com:7001myservercontextBendpointB. If more than one Service Provider partner is discovered that is a match for the initial string, the partner with the longest initial string match is selected. This form of partner lookup string excludes the endpoint URL from being added as an Audience URI in the generated assertion. 4-20 Securing Oracle WebLogic Server

4.11.2.1.2 Specifying Default Partners To support the need for a default Service Provider