Design And Implementation Of SSO In Enterprise Application System On CAS

Currently,the information construction of enterprises has entered the Internet Age."Interconnection" and "Sharing" are the main trends of information construction of enterprises in the future.In the process of enterprise development,The new information system will be integrated into the operation and management of the enterprises,so as to improve the operational efficiency of the business and improve the competitiveness of the enterprises.But with the ever-increasing growth of the information system,different systems run independently one another,which leads to manage the systems more difficult.Especially the user authentication and user management of systems,both independent and scattered,An employee tends to have more than one system of multiple accounts,this is neither conducive to the maintenance of management personnel,nor favorable for account users to promote the efficiency of work.To solve this problem above perfectly,the single sign-on system is definitely the best choice.the single sign-on system acts as the unified authentication center of each information system user,and is the unified authentication entrance which can access to each information system and uniformly manages the operation and state information of all the accounts in the systems.Managers can realize the one-stop user managemen of each information system inside the enterprises,the users can realize single certification and multipl-business system roaming function through message linkage mechanism of certification center.First of all,the development background and significance of single sign-on system were analyzed in this paper,including the research status of this technology at home and abroad,and then introduced the mainstream technology scheme of single sign-on,carring on comparative analysis to each scheme,and finally choosed technical scheme based on CAS protocol to realize single sign-on in this paper.The thesis analyzed the practical request of the enterprises,and designed protocol based on CAS as request to realize single sign-on of each infornation system.The system is at the core of the CAS service,with LDAP and MySQL as the unified authentication center system.Certification center system can provide users unified authentication service,and the account information query,storage as well as management services.Finally,the certification center is linked with the CAS client embedded in each information system,enabling the user to implement single sign-on in each information system.In the end,the user management platform model was implemented using the SSH framework in the JAVA enterprise platform.