Research Of SAML-based SSO Technology In Safety Management System

With the development of information technology, people rely on the deepening of electronic office system. However, the system of authentication and authorization system and security management strategy are independent of each other, the user to access multiple business system needs to remember multiple username and password. This makes the confusion password or forget the password of the situation is very common, brought inconvenience to the user’s daily work. Based on these reasons, the concept of single sign-on technology emerge as the times require.Single sign-on is a security communication technology, helping users fast access multiple sites in the network. Multi application platform in a business, the user only once the identity authentication in an application, you can free access to all the mutual trust and application system. In a multi business-related applications system, the user authentication is performed only once in one application, you can freely access all the mutual trust applications. This will not only improve the user experience, improve work efficiency, but also can increase the security of the entire system. Among the single sign-on solutions, the SAML specification (proposed by the International Organization for Standardization OASIS) is more influential. The specification is based on XML document format, provides a uniform format for encapsulating authentication information, to pass authentication information between heterogeneous systems.This paper describes the research status of single sign-on technology, analyze some popular solutions. Then, shows the details of SAML specification and the background of SAML-based technology. After given the actual needs of the business management platform in my company, presenting a set of identity management system based on SAML specifications. At last, three important parts of the management system related to the single sign-on functionality are described in detail, with some given function module and implementation code.