摘要： 介绍了一个企业信息门户中单点登录系统的实现。系统实现了基于Cookies的单点登录系统,解决了SSO中Cookies不能跨域共享的问题,采用Cookie和Cookie Server来共同保存用户身份信息,具有较好的安全性。同时采用Web服务来实现统一的身份认证,实现了基于LDAP的用户身份信息的保存,最后提出了企业信息门户中一种基于用户、用户组、应用以及角色相结合的权限管理方法。
关键词:
企业信息门户,
单点登录,
Cookies,
Web服务,
访问控制
Abstract: A single sign on system based on Cookies in enterprise information portal is presented, which solves the problem that the Cookies cannot support across-domain share. Further more the security is assured using Cookies and Cookie server to keep user’s credential information. And it uses Web services to construct user authentication, uses LDAP to keep user information. At last, the paper proposes a new access control method based on user, user group, application and role in EIP.
中图分类号:
谭立球,费耀平,李建华. 企业信息门户单点登录系统的实现[J]. , 2005, 31(17): 112-114.
TAN Liqiu1,2, FEI Yaoping2, LI Jianhua2. Realization of Single Sign-on in Enterprise Information Portal[J]. , 2005, 31(17): 112-114.