【摘要】 Web服务适用于跨平台应用的集成,Web服务的安全问题也越来越突出,对请求者的身份进行认证和访问控制是解决Web服务安全问题的重要途径。SAML能解决Web服务安全中的认证问题。通过介绍SAML,重点分析和研究了基于SAML2.0的身份联盟建立的过程和原理,并用WS-Security规范保证SAML自身的安全性。最后给出了一个简单的应用。更多还原

【Abstract】 Web services are suitable for cross-platform and cross-application integration,the security of the web services is more and more important,user authentication and access control are important approaches to solve the safety problems.SAML is with capability of solving the authentication issues in web services security.SAML is introduced firstly,then weightily establishing identity federation based on SAML2.0 is analyzed,and WS-Security is introduced to protect SAML security.Finally,a simple application is presented.更多还原