Design And Implementation Of A Single Sign-on System

With the development of information construction, more and more business systemshave been put into application. These business systems always were set up separately, andimplemented gradually, which lacked overall planning. When using these systems，usershave to keep every business system account and password in mind. This not only leads tousers’ inconvenience, also bring certain security hidden danger and managementcomplexity. By combining the situation of my company, the essay designs and implementsa single sign-on system to solve this problem. Users can enter multiple business systemsthrough only one user name and password. The works are as below:Firstly, combining with the actual situation of the work, the article analyses thespecific application scenario of the single sign-on system, defines business requirements,user requirements, functional requirements and non-functional requirements.Secondly, the paper provides a scheme of single sign-on system without modifyingthe existing business system. Basing on the common single sign-on system, we use thefollowing solutions: For the business system can modify the code, adopt the cross-domaintrusted credentials to access to the business system access. For the business system can’tmodify the code, adopt the way of the agent page to solve it.Thirdly, the scheme is flexible, scalable and easy to manage. Through the hierarchicaldesign, the single sign-on system is separated logically from the business system. It caneasily add or delete business systems. In the authorization management module, adoptingthe crowdsourcing design pattern, it allows users to customize the business systems.Fourthly, this paper uses ASP.NET, JavaScript and other related technologies toachieve the single sign-on system, detailed describes each module to achieve its specificprocess, designs to meet the practical application of a single sign-on system.The single sign-on system which this paper design and implement, has been used inpractical work. The function of this system meet the requirements of enterprise informationsystem integration, solves the repetition and conflict of user name in different systems, whichhas a certain reference significance to the design and implementation of similar systems.