【摘要】 单点登录是实现集中身份认证和数据统一管理的一种访问控制方法,它能够解决分布式系统的多重认证问题。在对单点登录以及安全断言标记语言(SAML)分析的基础上,设计和实现了基于SAML2的单点登录服务器FAAS(联邦认证授权服务器),并成功用于某上市企业ERP开发集成项目中。该设计的重点是SAML2的协议实现和FAAS的架构。更多还原

【Abstract】 Single sign-on(SSO) is an access control method which could solve the multiple authentications problem in distributed systems and also make central identity management.Firstly,SSO and security assertion markup language(SAML) concepts is analyzed and then the design and implementation of the SAML2 based federated authentication and authority server(FAAS) is described.Now the FAAS is successfully applied to a top-list company’s ERP system.The implementation of stack of SAML2 protocols and the archi-tecture of the FAAS are discussed.更多还原