The authorization only works in Talend Runtime, so the service needs to be deployed inside Talend Runtime Container. The service call is intercepted by the authorization filter in Talend Runtime and is handled to get tokens with Security Token Service. Security Token Service does authentication and role validation with Syncope during backend
calls.
If the service provider uses Service Locator, the client can also use it to dynamically get the service location.