Single sign-on method, system and load balancing equipment based on load balance

Abstract

The invention provides a single sign-on method, system and load balancing equipment based on load balance, wherein a current user accesses a Web virtual server by load balancing (LB) equipment, and a real Web application server under the Web virtual server redirects the user to a centralized authentication service (CAS) virtual server for authentication; the LB equipment and the real Web application server obtain a real CAS server which authenticates the current user and redirects the current user to the Web virtual server for service access; and the real Web application server under the Web virtual server requests the real CAS server to perform verification, and realizes the single sign-on of the current user according the verification result. By the scheme provided by the invention, thecurrent user and the real Web application server both can accurately access the real CAS server which is in charge of the authentication of the current user, so that viscous access is realized, and the effective authentication and sign-on of users are ensured.

Description

technical field [0001] The invention relates to network access technology, in particular to a load balancing-based single sign-on method, system and load balancing equipment. Background technique [0002] With the wide application of information technology and network technology, various application systems have emerged, such as: office automation (OA) system, human resources (HR) management system, financial system, customer relationship management (CRM) system, Enterprise resource planning (ERP) system, government online approval system, school card system, etc. [0003] To use these application systems, users must log in. If each application system has an independent identity authentication security policy, such as requiring the input of user ID and password, then the possibility of making mistakes when the user logs in will be greater, and the possibility of being illegally intercepted and destroyed will be greater. Security will be reduced. In order to improve securi...

AI Technical Summary

Problems solved by technology

[0019] In view of this, the first purpose of the present invention is to provide a single sign-on method based on load balancing, which can ensure that the real Web server accessed by the user can accurately know the real CAS server responsible for authenticating the user, and overcome the sticky problem of access, so as to ensure that users can effectively authenticate and log in during the process of single sign-on based on load balancing

[0020] The second purpose of the present invention is to provide a single sign-on system based on load balancing, which can ensure that the real Web server accessed by the user can accurately know the real CAS server responsible for authenticating the user, and overcome the problem that the existing technology cannot realize sticky access , so as to ensure that users can effectively authenticate and log in during the process of single sign-on based on load balancing

[0021] The third purpose of the present invention is to provide a load balancing device, which can ensure that the real Web server accessed by the user can accurately know the real CAS server responsible for authenticating the user, and overcome the problem that the existing technology cannot achieve sticky access, thereby ensuring that the user Efficient authentication and login in load balancing based single sign-on process

Images