In the illustration, the browser attempts to access a partner application on the Oracle HTTP Server. mod_osso, represented as a box within the server icon, redirects the user to the single sign-on server, located just beneath the Oracle HTTP Server. A dotted arrow shows the browser certificate being passed to the server as part of the redirection. Another arrow shows the partner application serving content to the browser. Two boxes attached to the single sign-on server show the user mapping module and the policy.properties file.