When a user first attempts to access the Business Control Center, a validation request is sent to the Commerce SSO server. This request contains both the ticket parameter and a service parameter containing the value of the original URL being requested. (The request also contains a logout parameter to enable SSO logout, as discussed below.) If the SSO server indicates it is valid for the user associated with the ticket to access the URL in the service parameter, the ProfileRequestServlet loads the associated user profile.