For a step-by-step description of the authentication flow in certificate-enabled Single Sign-On, see the text immediately following the graphic.