This illustration represents OracleAS partner applications, the Windows 2000 server, and the single sign-on server as residing on separate computers. A box attached to the Windows server icon represents Microsoft Active Directory. A box attached to the single sign-on server represents Oracle Internet Directory. A dotted arrow running between these two boxes represents user synchronization between these two directories. An addition to the standard flow arrows is an arrow showing the Kerberos ticket being granted to the browser.