基于SAML实现Web Service的单点登录

Single Sign-On System of Web Service Based on SAML

对于Web服务的发展,安全是一个重要课题。安全声明标记语言SAML提供了基于属性的身份验证,可令不同类型的安全性服务系统之间实现交互。本文提出了基于SAML实现Web Service的单点登录系统,只需一次主动身份验证就可以访问不同系统中的安全资源。这样就使得各种不同安全性服务系统间的交互变得非常通畅,管理起来也更加便利。

Security is a key point of the development of Web Service. SAML makes security systems of different types communicate with a validation function based on attribute. Author proposes a SSO system based on SAML, and can access different security resources with just once initiative logon. It makes the communication between different security systems become very convenient, and easy to mintage.