Design And Implementation Of Portal-based SSO System

The basic philosophy of portal-based Single Sign On is to provide unlimited and safe accessing the protected application resource integrated in the portal system with SSO (Single Sign-on).Because portal system involve the coordination of many applications belonging to different domains,it will bring about the issue of cross-domain doordinated identification and the security message transport.Therefore the cross-domain Single Sign On based on uniformed standards under the portal system has become a focus of the researches in the security field at home and abroad.By the study of the portal framework and the model of SAML-based Single Sign-on, the design of portal-base SSO system has been completed, including the design of portal interface framework and the SSO model under the portal system. The design of the portal controls which constitute and customize the portal framework has been done firstly, such as shell control, skeleton control, skin control and so on.With the research of the Pull model and Push model, two kinds of SSO model basing on SAML technology, along with the study of integrated characteristics and the functional demand of the SSO system under portal, a SSO model under the portal system and the owned function of the modules has been designed.The portal-based SSO system has been implemented basing on the design of the system, including of the implementation of portlet, the integrated control, and the function of the SSO model, such as the function of the resource filter, the validation and parse of the SAML tokens provided by the identity provider module and the function of providing login interface, authenticating the identity of users and the producing the SAML tokens provided by the identity information management module.The system achieves not only the target of the secure transmission of the authentication information about the users between the various business applications under the portal system, but also the target of the cross-domain collaboration for the Single Sign-on system.