This graphic shows an ideal frontend configuration using OAM SSO.