A. This configuration is only available if the domain meets these requirements: running WebLogic Server 12c and including a load balancer.

B. By default, all requests whose URI begins with /_protected (two underscore characters followed by the word "protected") are protected.

C. A trusted or confidential application has to be defined in Oracle Identity Cloud Service and associated with the WebLogic server instance using application client ID and client secret.

D. The WebLogic Server security realm in the service instance is configured to use Oracle Identity Cloud Service for authentication only.