一种企业应用中的单点登录系统的设计

针对企业多套应用系统用户认证相对独立、用户必须同时使用多个账户重复登录的问题,根据企业应用环境特点设计了一种单点登录（SSO）体系,该设计基于SAML技术构建统一认证平台,建立了用户帐号映射关系,对现有系统进行客户化改造,封装成认证中心（IDP）和服务提供者（SP）,通过集成的认证代理实现认证服务,实现了SSO和现有系统的良好结合。

Design of a Single Sign-On System in Enterprise Application

For the problem that re-authentication is required each time the user accesses different applications for an enterprise,this paper designed a single sign-on（SSO） system under the environmental characteristics of enterprise applications.Based on SAML technology,a unified authentication center was built.User account mapping to existing systems was established,and the existing systems were packaged into the identity provider（IDP） or service providers（SP） to implement authentication services.Eventually,a good combination of the SSO and existing systems was achieved.