This graphic depicts how the JAAS provider is used by both the middle and back-end tiers in a Web environment. The provider can store defined usernames, roles, realm and policy information in XML files or within the Oracle Internet Directory (OID).