The Design And Implementation Of Single Sign-on(SSO)on IPTV5System

With the development of internet, a company may have multiple application systems, BrightHouse’s IPTV5is such a systems that integrate multiple systems together in a certain way. There are five website on IPTV5, to simplify complicated problems of frequent login when users access to multiple applications, they made a very natural demand for single sign-on function on IPTV5. Single sign-on, referred to as SSO, namely users just only need to log in once, than can access all of the mutual trust application system.Be different from the traditional system, in order to reduce the cost of development and maintenance, IPTV5used a rapid development framework, five different domain name application systems are integrated into an application platform. The particular architecture of IPTV5brings challenges to the traditional implementation sense of single sign-on. And there is no open source project can be directly used on IPTV5.This paper designs and implements single sign on IPTV5. The SSO can be divided into authentication and authorization, and the authentication process is based on a new SAML2.0protocol, the certification process is a SOAP-based programming. So the paper will analysis the details and features of the SAML2.0protocol and SOAP protocol.This paper introduces the architecture of IPTV5system first, and compares the difference between traditional login and single sign login mode. Given the complexity of SAML protocol. The article only describes the part of the concepts related to the project. In order to ensure the security of single sign on, this paper discusses how to make, buy and use the relevant certificate.Then, the paper analyses the system’s functional requirements and non functional requirements, and design and realization of the system on this basis. There are several aspects:the design of certificate file structure, system business process design, low coupling design and scalability design etc.After the completion of the single sign-on feature, the user only needs to input a username and password once, then he can use the same browser to access five systems of IPTV5.This will greatly enhance the user experience.