Plug-in type SSO (single signon) integration method oriented to HTTP (hypertext transfer protocol) identity authentication protocol

Abstract

The invention relates to a plug-in type SSO (single signon) integration method oriented to an HTTP (hypertext transfer protocol) identity authentication protocol. An SSO system of the plug-in type SSO integration method comprises a Web service assembly, a Web application assembly, an SSO HTTP plug-in, a security token process page, a browser, an identity service system, a main account database and a main/secondary account binding database, wherein the SSO HTTP plug-in is the key, and is plugged into an HTTP request and response process channel of the Web service assembly utilizing the HTTP identity authentication protocol based on an expanding mechanism provided by a Web service assembly; and after a user logs in the identity service system, the SSO HTTP plug-in automatically finishes interaction with the HTTP identity authentication protocol of the Web service assembly by utilizing account name and passwords of the user on the Web application system so that the user does not need to input the account name and the passwords of the Web application system so as to log in the Web application system and realize the purpose of SSO. Through the plug-in type SSO integration method oriented to the HTTP identity authentication protocol, disclosed by the invention, the SSO does not need to change original safety configuration and functions of a system.

Description

technical field [0001] The invention belongs to the technical field of identity authentication and access control of information security, in particular, it is a plug-in single sign-on integration method for HTTP identity authentication protocol. Background technique [0002] With the development of enterprise e-commerce and office informatization, more and more enterprises and organizations have established a large number of special-purpose information systems, collectively referred to as application systems, such as customer relationship management systems, ERP (Enterprise Resource Planning) systems, Financial system, office automation system, e-mail system, etc. While these numerous application systems bring convenience to people's production, management, and office, and improve production and work efficiency, they also bring some troubles to people. That is, each user must remember that he (or she) is in different The account name and password of the application system ...

AI Technical Summary

Problems solved by technology

[0013] The purpose of the present invention is to propose a plug-in single sign-on integration for the HTTP identity authentication protocol in view of the situation that the Web application system authenticates the user based on the standard HTTP identity authentication protocol and the identity authentication security configuration cannot be modified or changed. method to overcome the deficiencies of existing single sign-on integration technologies

Images