Research And Development Of Single Sign-on System Base On LDAP

With the decreasing of computer hardware's price and the popularity of network development,more and more modern enterprises have many kinds of IT application systems. In order to complete the demand of different production,and management. Simultaneously, we discovered that these application systems often independent, less connection,And these development platforms are not unified. These will bring series of problems for they users. Main questions, such as:data sharing and user authentication. In order to use different application system, those who have been authenticated must be authenticated for many times. Along with the growth of these independent systems,users need to remember the different user names and passwords. Frequently, In order to avoid loss,the result is some unfortunate users possibly wrote down the usernames and his passwords. Accidentally, this will cause many serious security problems. Possibly,The scope of suffering injury will expand to the enterprise outside,The business partner,the business represent and customers also possibly to visit the website or the application(via the internet). Moreover,they also possibly requested to register many times. The user needs a unified Single Sign-On system. Namely, the user sign one time and authorize to visit other applications -- Single Sign-On the (SSO).Based on many kinds of SSO (Single Sign-On) technology, this article embarks from the enterprise existing application system, provids a simple solution of SSO. This strategy uses IBM Domino LDAP(Lightweight Directory Access Protocol) service to provide the user authenticity information, and uses Http Cookies,Form,LTPA(lightweight third party authentication),JAAS(Java Authentication and Authorization Service)as a basic authentication structure. This article provides the key technology of SSO and some useful methods to achieve SSO. At last,The article discusses the performance of the SSO system. All in all, The article has provided one kind of reference to integrate the complex IT application system and the methods of user's identification authenticating.