This illustration shows OracleAS partner applications, the third-party server, and the OracleAS Single Sign-On server residing on separate computers. A box attached to the third-party server represents the third-party authentication repository. A box attached to the OracleAS single sign-on server represents Oracle Internet Directory. A dotted arrow running between the two boxes represents user synchronization between the two directories. Supplementing the standard flow arrows are arrows showing the third-party server authenticating the user and setting a token. Two other arrows show the OracleAS Single Sign-On server retrieving the token from the browser and verifying it.