Design And Implementation Of An Identify Federation-Based SSO System For Web Application

Single sign on (SSO) is very important. With the large scale increased intranet business applications and internet web site based applications, it is a hot topic that how to implement SSO system.This paper analyzes the status quo of SSO technology and introduces some main SSO systems. Based on this study, the paper raises an identity federation-based SSO system. The solution is based on the Liberty Identity Federation Framework (ID-FF) by liberty alliance and SoureID.NET toolkit by Ping Identity. With the support of some key technologies such as SAML language and web technology, this solution implements features of single sign on, federation, name registration, federation termination and single logout, etc.After introducing the main function and frame of the system, the paper details the design of the framework and the relationship among the modules. It also illustrates the design of the database structure and interfaces. Then it gives out an analysis of the system.As a kind of software solution, this system is very practical for new and existing web site based applications. The paper finally shows some ideas for further improvement.