面向HTTP身份鉴别协议的单点登录透明集成技术研究

针对单点登录技术实施过程中, 采用HTTP身份鉴别协议的已有Web应用系统不能修改、改变的技术难题, 提出了一种无须修改Web应用程序和Web服务器的身份鉴别方式即可实现单点登录的单点登录透明集成技术。该技术通过插入到Web服务器的HTTP请求、响应处理通道中的一个插件, 自动处理与Web服务器交互的HTTP身份鉴别协议数据, 从而在对Web服务器不作改变、对Web应用程序不作修改的情况下, 实现单点登录功能。实际应用和测试结果表明, 该方案实现了预定的功能, 达到了预期的效果。所提方案对单点登录的应用实施非常有帮助。

Single sign-on transparent integration technology for Web systems with HTTP authentication protocols

To address the problem that existing legacy Web application systems using HTTP authentication protocols cannot be modified in implementing SSO technology, this paper proposed a transparent SSO integration technology which required no modifications to the existing legacy systems. The proposed technology employed a plug-in module which inserted into the HTTP request and response processing pipelines of a Web server. The plug-in automatically processed the reciprocal exchanges of authentication data with the Web server employing a HTTP authentication protocol. As a result, it achieved SSO without the changes or modifications to the Web server and application. Practical applications and tests demonstrate that the proposed technology has achieved the predined functionality and the expected effects. The technology is highly helpful to the implementations of SSO.