Sun ONE单点登录的研究

Research of Sun ONE SSO

单点登录(SSO)指的是用户仅作一次身份认证,随后就可以对所有被授权的网络资源进行无缝的访问.首先研究了Sun ONE单点登录原理;接着研究了编程实现SSO的JAAS,它灵活采用PAM(可插入的认证模块)进行身份认证;最后指出了SSO的发展方向以及自由联盟在统一单点登录系统方面做出的努力.

Single Sign-on（SSO） protocol enables users to authenticate once yet to access multiple resources. In other words, successive attempts by a user to access protected resources will not require them to provide authentication credentials for each attempt. The present paper studies Sun ONE SSO mechanism and programming to perform SSO with JAAS which flexibly integrates PAM（pluggable authentication module） to fulfill identity authentication. It also introduces development direction of SSO and efforts of Liberty Alli- ance in establishing a unified SSO system.