Research On Single Sign-on Technology In Enterprise Application Integration Based On Enterprise Information Portal

With the development of information technology, many enterprises and government have built up their own information portal to realize enterprise internal resource integration and information communication, to provide better services for the end users, as meanwhile it has improved work efficiency. As a result of the application system is getting variegated under the extending of enterprise and the spreading of its operations, user has to log on different systems, and memorize account names and passwords of different systems, these bring about the problem of information security. The invention of single sign-on (SSO) system is the effective solution to solve above problems. The main goals of this system are to administer the information so that the users only need to be identified one time to access all the authorized internet resource in the multi-application systems., there by guaranteeing the security of system and users' information.Based on the analysis of Single Sign-On system framework, for Single Sign-On system framework, the user authentication Mechanism, Credential transfer protocol, cross-domain authentication, account security and other issues, we compared a number of popular open source Single Sign-On projects and enterprise-class solutions. An in-depth study of Yale CAS System has been made. Considering of the practical needs of the project, a Single Sign-On system based on user mapping is designed and developed for the service information portal, Achieving functions of single sign-on for web applications and user mapping information management.The system which consists of single sign-on portal module and user mapping information management module, achieved SSO for several representative web application systems based on B/S structure. We also provided an interface for users to manage their user mapping information. In addition, a number of security mechanisms are developed to protect user account.It is indicated via the project being developed and applied:SSO technology has simplified user's operation, upgraded user's experience, decreased the cost of system development and administration, established a good foundation of application integration for enterprise, and had very aspiring significance for carrying out of enterprise information portal and application integration.