安全斷言標記語言SAML是讓互相信賴的雙方可以交換安全相關(guān)信息的一個XML架
構(gòu)，它定義了不同系統(tǒng)之間安全服務(wù)交換認證和授權(quán)信息的機制，單點登錄技術(shù)SSO是實現(xiàn)集成身份認證和授權(quán)服務(wù)的有效方法，通過對傳統(tǒng)的SSO分析，提出一種基于SAML、利用PKI/PMI的單點登錄企業(yè)級的應(yīng)用系統(tǒng)，有效解決跨域系統(tǒng)和異構(gòu)應(yīng)用平臺的一次認證、全程訪問的安全信息交換；成功在“金稅三期”資源整合中界面整合及門戶項目得到應(yīng)用。
關(guān)鍵詞: 安全斷言標記語言；單點登錄；安全服務(wù)；認證；授權(quán)
Abstract: The Security Assertion Markup Language (SAML) is an XML framework for
exchanging security information between reliantly parties, it defines a mechanism for exchanging authentication and authorization information among different systems, Single Sign On (SSO) is an effective method which implement Integrated authentication and authorization。Base on analyze traditional SSO ,this paper discussed an effective application system using SAML and PKI/PMI technology , which resolved Security information exchange among heterogeneous system through once authentication realize full access. This technology was used successful in the project of “third of CTAIS”.
Key words: SAML；SSO；Web Services；Authentication；Authorization