The figure shows the Settings for OAM Identity Asserter page with the Control Flag set to SUFFICIENT and the Chosen Active Types list set to ObSSOCookie and OAM_REMOTE_USER.