Active Directory Federation (ADFS) Application Service Based On Unified Identity Authentication In Guizhou Series Of Tax System

Usually in a large enterprise within the organization, many applications, a large amount of users of these systems, and distribution of applications is complex and often heterogeneous; such an application environment on a large number of users between various systems authentication problems to be solved. Traditional Web authentication methods, different websites, have their own set of independent authentication methods. In the user’s perspective, the need to remember multiple sites authentication information to be able to secure access to the various sites, and for different websites need to be repeated authentication, which is undoubtedly very easy to use and hard to remember live multiple identities; in system maintenance’s point of view, the need to maintain multiple sites account information and authentication mechanisms to increase the cost of the system. Of the problem to be solved, the development of the Internet uniform identity authentication, Single Sign On technology, users need only log in once to have access to all the application system of mutual trust within the organization, to simplify the user in the use of multiple sites when the authentication process, and reduce site maintenance workload, while the new site in the future, you can reuse the authentication system has been deployed, scalability and flexibility has been improved.Since the emergence of the above problems, taking into account the complex network and application environment of Guizhou Tax, need to adopt a more generic, standardized single sign-on solution. This paper describes a single sign-on solutions based on the Microsoft Windows platform with leading technology ADFS. Compared to other products, ADFS has a clear advantage, can be very convenient and integrated the isomorphic or heterogeneous Web and application server, and can support more authentication methods. It also describes how the planning Guizhou Tax system series, and ADFS, not only play to the advantage of the single sign-on, and allows the user the convenience of using multiple tax-Series systems, security, and reliability are improved for the IRD system information technology infrastructure and the future system expansion had laid a solid cornerstone.