Cisco ISE doesn't insert O-N into the Request by default. O-N helps Home sites identify where their users' authentications are coming from. Combined with Chargeable User Identity, Home and Visited sites can provide and follow an audit trail back to a user without the Visited site knowing the users' details.