This illustration contains a DIT showing two realms, each containing a user named jsmith. Above the exploded view are boxes showing how mod_osso sets headers for a user and how the contents of these headers enable a distinction to be made between users with the same user name. A reproduction of the single sign-on page is affixed to both user entries. This reproduction shows how these users enter their credentials.