Differences between OAM 10g Webgates and OAM 11g Webgates

OAM 10g Webgates:

1.   C-based agents that are to be deployed on Web servers
2.   Domain-based cookie
3.   ObSSOCookie (one for all 10g Webgates)
4.   One Web server configuration supported per Webgate. Need to have multiple WebGates for multiple instances
5.   There is no detached credential collector (DCC)
6.   OAM 10g provides a proprietary multiple network domain SSO capability that predates Oracle Identity Federation. Complex configuration is required.

OAM 11g Webgates:

1.  Java-based agents that are to be deployed on Web Servers (Specific to OHS Server)
2.   Host-based cookie.
3.   Individual Webgate OAMAuthnCookie_ making it more secure
4.   Has separate install and configuration option.  Hence, single install and multiple instance configuration is supported. 
5.  Capability to act as a detached credential collector (DCC)
6.  OAM 11g supports cross-network-domain SSO out of the box.Oracle recommends you use Oracle Identity Federation for this situation.