How Sun Java System Access Manager and SAML Make Single Sign-On Work