Analysis And Design Of Single Sign On In Web Application

Blog, it shares interactive Web applications such as emphasis to meet the network users humane, social needs, as users of the application of the most attractive site.These Web applications are using B / S structure. To ensure system security, each application will be conducted on the logged-on user authentication, such as being asked to enter a user name and password must be verified in order to obtain the appropriate permissions, authorized users can access the appropriate resources. In general, the user access to different applications, be separately authorized to enter a user name and password, respectively, over time, a waste of the user's time, reduced work efficiency, but also increased security risks, while a simple repetition of the cumbersome Internet users experience reduced work opportunities for new applications, reducing the attractiveness of the site, reducing the users of the site loyalty and stickiness.SSO (Single Sign-On) single sign-on technology is the best solution to solve the problem one. Single sign-on principle is the first time the user visits a site once mandatory authentication, can then obtain the permission of different applications, seamless access to all authorized network resources.This thesis first describes the development process of Web application system, B / S architecture, the characteristics of related information security theory, and security protocols, and brief introduction of the SSO architecture design, JAAS (Java Authentication and Authorization Services), SOAP (Simple Object Access Protocal), AXIS, and other technology's role in the development of SSO. SSO described the detailed analysis and design. Then combined with the China Securities newspaper Zhongzheng Wang actual situation in many Web applications do to deploy single sign-on analysis and design.