Study And Design Of Single Sign-On System Based On Yale-AAS

With the development of the Electronic Information, and the growing number of users in applications, so the demand for the integration of enterprise application information is becoming significant. We need to integrate the original applications to an integrated system, or a new subsystem is embedded in an existed system. At the same time, User is granted to access and operate the protected resources between subsystems, thus we can protect application’s resources. Enterprise proposes different solutions by Single Sign-On and Authorization Access Control technology. This paper is mainly about the solution of Jiangxi Province Flood Control&Drought Relief Decision Support System based on Single Sign-On and Authorization Access Control.Flood Control&Drought Relief Decision Support System is a large and comprehensive system, it contains lots of subsystems. The enterprise adopts the SSO and RBAC technology to embed the subsystem in an integrated application. And then, the user can access the authorized system in the application by one legitimate login, which means:" Once Login. Everywhere Access"Firstly, the paper describes the current status of Flood Control&Drought Relief Decision Support System. SSO and Access Control. Then it explains the principle of CAS Single Sign-On and RBAC Authorization Management. Lastly, through the analysis of the demand for the SSO and Access Control, we get a solution of the Flood Control&Drought Relief Decision Support System, which based on RBAC-CAS Single Sign-On.In this paper, it achieves the CAS-SSO and RBAC Authorization Management module by the detailed analysis and design of the system, and CAS has been successfully deployed in the system. Besides, right permission module required in the SSO Authentication is severed as a Web Service in this system; other subsystem can call this service through its interface. The CAS Single Sign-On and RBAC Access Control designed in this paper can meet the requirements of user login and Authorization Access Control in Flood Control&Drought Relief Decision Support System.