A New Single Sign-on Solution in Cloud

摘要

In order to deliver centralized visibility for login activity, reduce identity proliferation and confusion, increase user adoption and security, reduce administrative costs, and support for entire identity management lifecycle in cloud, a new single sign-on solution is proposed in this paper. By introducing OAuth protocol combined with identity federation mechanism and identity mapping, the new single sign-on model can give the cloud user that has succeed through an identity authentication the permission to access other cloud services in a reasonable time period without entering the username and password repeatedly. Empirical results show that the solution will be used as an impactful measure in scenarios where frequent interactions among different cloud services and clouds that result significant impact across multiple security domains. The OAuth-based single sign-on solution can effectively solve the problems of complexity of identity management and cross-domain authentication in cloud environment and thus increased the security and improved the user's efficiency.