一种简单跨域单点登录系统的实现

分布式体系架构下多站点协作网络的应用需要统一身份认证和资源访问控制机制，单点登录系统是完成这项功能的必备模块。采用一种应用于Web环境下轻量级的单点登录解决方案，它是一种基于HTTP重定向和票据，并以跨域Cookie的共享为核心的集中式认证系统。本方案在分布式数据资源共享网络建设中实现了多个站点的跨域全局登录、用户认证和用户授权等功能。通过建立规范的登录控制模块，简单地修改配置文件，就可方便地将分散网络节点加入认证体系，完成网络节点单点登录和资源访问控制问题。

Implementation of a simple cross domain single sign on system

Distributed structure based multi-sites corporation web applications need a universal authentication and resources access control mechanism, and Single Sign On (SSO) System is an indispensable module for such applications. In practice, we develop a simple single sign on solution that is a central authentication system based on HTTP Redirection and Tickets, with Cross Domain Cookie Sharing as key technology. This solution plays a vital role in distributed data sharing network construction, which realizes cross domain universal user login, user authentication and user authorization. By establishing standard control module, a simple configuration file may conveniently integrate distributed network nodes into one authentication system then accomplish Single Sign On and universal resources access control.