This figure shows how in an identity management environment, a subscriber is registered as a realm. Using the subscriber DN, the JAAS Provider locates the subscriber-specific Oracle Context and creates a `cn=JAZNContext` subtree.

In this case, the JAAS Provider stores the entry `cn=usermgr`, the entry `cn=rolemgr`, and policy-related entries under the subscriber's `JAZNContext`.

In this figure, `cn=oracle` is a subscriber. The figure depicts the structure within which `JAZNContext` resides:

1. Top level is `cn=oracle`.

2. Second level is `cn=OracleContext`.

3. Third level is `cn=Products`.

4. Fourth level is `cn=JAZNContext`.

Beneath `cn=JAZNContext` are the entries `cn=usermgr`, `cn=rolemgr`, and `cn=Policy`; beneath `cn=Policy` are `cn=Permissions` and `cn=Grantees`.

(End of description.)