I think it may be used by the database when you are doing OS level authentication. I think a user can have an oracle username that is different from their OS username. When you use OS authentication, I believe the OS username is in the external_name field.
I think it is also used when authenticated against an X500 or LDAP directory service. .
.. Eat, think and be merry .
... ....................... .