We have an enterprise scale environment and are trying to figure out why SSO only lets us add two domain controllers to an identity source. We're also confused why we need to hardcode them at all. There may be instances where both of these DCs could be down for maintenance, but other DCs are online. Why can't SSO act like other Active Directory apps and lookup which Domain Controllers are available?
