This illustration shows Oracle Application Server partner applications, the Windows 2000 server, and the OracleAS Single Sign-On Server located on separate computers. There is a box attached to the Windows server that represents Microsoft Active Directory. There is a box attached to the OracleAS Single Sign-On Server that represents the Oracle back-end directory. (The back-end directory must be Oracle Internet Directory to work with the OracleAS Single Sign-On Server.) A dotted-line arrow runs between these two boxes and it represents user synchronization between the two directories. There are standard flow arrows and an arrow showing the Kerberos ticket being granted to the browser.