In this illustration, the single sign-on server appears on a computer separate from other identity management infrastructure components. To the right of it are the directory server and the identity management infrastructure database. These two components are located within a dotted line box indicating that they reside on a second computer. Arrows run from the browser to the single sign-on server to the directory and finally to the database. A separate arrow represents operations between the single sign-on server and the database that do not involve the directory.