# Guide to OpenIG
Chapter 6. Detailed Use Cases

Sidebar | Prev | Up | Next

## 6.2. OpenAM Integration

The figure below illustrates OpenIG integrated into an OpenAM deployment. In this deployment OpenIG is running in a container that is protected by an OpenAM policy agent. The agent is configured to forward a header, with the subject (user) of the single sign-on session, to OpenIG. OpenIG then uses the subject as the login credentials, or uses the subject as a reference to look up the login credentials in a database or directory. The HR application is integrated into the SSO deployment without an agent or any modification to the application or its deployment configuration.

[D]

1. User browses to the Portal.

2. OpenAM plugin intercepts the request, finds no valid OpenAM session, redirects the user to the OpenAM login pages.

3. OpenAM logs in the user and redirects back to the Portal.

4. OpenAM plugin finds a valid session, request goes through, OpenIG passes the request through to the Portal.

5. Portal finds no local session, redirects to the Portal login page.

6. OpenIG inspects the redirect, finds a match for the login page, creates the login form, and POSTs it to the Portal.

7. Portal validates the credentials and redirects to the Portal page.

8. Gateway passes the request through to the browser.