The Design And Implementation Of A Single Sign-On Scheme For Cross Domain Web Applications Based On SOA

With the research and in-depth analysis of relevant literature on single sign-on, we conclude that the existing single sign-on (SSO) schemes did relatively more modification to original system when adding new application into the structure, the coupling between applications was high.In this paper, we propose a SSO scheme based on SOA which would make business system, authentication proxy, authentication authority management as separate services, use enterprise service bus (ESB) to accomplished information interaction, ticket transmission and implement cross domain SSO. The login authentication of this system uses authentication proxy which could use several forms of authentication; likewise, the scheme is based on PKI/PMI, which achieves strong identity authority and flexible permission management. The result shows that, our scheme has a high secure and broad perspective solution to solve the problem of high coupling in SSO.This paper also introduces the design and implementation of the SSO system using open-source software, including SOAP engine XFire for packaging the Web Service, Apache ServiceMix for ESB and Eclipse for Integrated Develop Environment. For the implementation of cryptography Mechanism, we use the Java security API.