Research And Application Of Portal's Single-sign On

We have entered into an internet technology age, most of the IT systems have independent user system and different authentication mode. So it is necessary to integrity existed IT systems, to build enterprise portal. By unified identity management, once user logs in one system successfully, he can visit all system protected by unified authentication system. Which is called Single Sign-on(SSO).The article generally describes the latest tech development and key points of Single Sign-on tech. After analyze and compare same type of solutions, design a general Single Sign-on solution according to companie's need. It contests following sections:(1) Directory Service System. Which manage user's account and password and other information using Windows 2000 Active Directory (AD). This is data basis of SSO. (2) Unified Account Management(UAM). Using Interface of UAM system, achieve synchronization of users' information between Human Resource System and AD; (3)SSO Web System Authentication Center. Describes key tech point of Netegrity SiteMinder and how to complete web-based Sign Sign-on using Netegrity SiteMinder and AD. By SSO system, we unified B2E user account, and built a unified authentication mechanism, which provide a framework of authentication for developing systems.Firstly, the article analyses the architecture of companie's organization an person, and designs AD's phisical and logical architecture, and AD's data model by UML method. Based on this, carry on SSO on serval typical web system one by one after research Netegrity Siteminder's policy management. It's concluded that this solution successfully resolves unified authentication of different web system in enterprise,and build a good base for unified authoricaion of IT systems.