Research and Implementation of Single Sign-On Mechanism for ASP Pattern

摘要

Software Services based Application Service Provider pattern is an important method in constructing enterprise applications, which integrate business systems with different authentication mechanism. So there are questions such as repeated authentication and authorization, difficulties in authorization management, difficult to describe security information interoperability. This paper proposes a method, which stores information in a uniform format, accesses it in a standard interface and exploits account federation, authentication proxy, and authorization proxy to transfer authentication and authorization results. As a result, we design and implement a single sign-on system by this method.