Research And Implementation Of Enterprise Multi-service System In The Identity Management System

As the enterprise's recognition to security policy,and the hugeness and complexity of the enterprise system's client flock,the concept of idnetity management is being concerned. For there is no uniform identity centralized management solution, lots of identity management modules which are dispersed in time and space occured in enterprise multi- business system to resolve the problem od identity management temporarily. But for the complication of Enterprise Application System, dispersed identity management is more and more difficult to maintain and has wasted the massive resources, that is becoming the problem to be solved urgently of enterprises.This article put forward a solution of identity centralized management and SSO which is based on JAAS frame and LDAPv3.The characteristic of the solution is facilitated integration and easy to expand.Using the directory server based on LDAPv3 to be the base store structure of identity information ,that makes the implement of identity information tree easy.Query-optimized LDAPv3 improved the capability of system. Beacause the identity authentication and authorization are based on JAAS,so the system has strong expansibility. By the idnetity manage agent deployed on application server, users' URL-based security access control is being able to come true conveniently.Keep the SSOToken provided by session management in the cookie to achieve users'SSO (Single Sign-On) .