Method, device and system for realizing universal single sign-on

Abstract

The invention discloses a method, a device and a system for realizing universal single sign-on. A service middle layer universal to different single sign-on products is arranged between an access system and a single sign-on authentication server; and when the service middle layer carries out authority authentication on the access system in a single sign-on mode, the service middle layer receives the access request of a user browser, the identity token contained in the visit request is submitted to the single sign-on authentication server for verification, and in addition, the authentication results returned by the single sign-on authentication server are received. Through the method, the device and the system, the interaction between each access system and the service middle layer is not the direct interaction with the single sign-on products, and in addition, the service middle layer provides the universal single sign-on mode, so the universality of the single sign-on is ensured, and the authority authentication can be carried out on each access system in a unified way.

Description

technical field [0001] The present invention relates to the communication field, in particular to a method, device and system for realizing universal single sign-on. Background technique [0002] As a general enterprise business integration solution, Single Sign On (SSO) has been widely used in enterprise internal information systems. A unified authentication system is required to implement single sign-on, and users must first pass authentication in the authentication system before accessing the application system. The authentication system records the user's login status after the user passes the authentication, and issues an identity token (Token) to the user's browser. When a user browser accesses an application system, the application system first obtains the identity token, then verifies the legitimacy of the identity token to the authentication server and obtains the user identity, and finally responds according to the verification result. [0003] To realize the abo...

AI Technical Summary

Problems solved by technology

[0005] 1. The enterprise's internal information system environment is complex, and single sign-on products may not be able to support all systems

Many current single sign-on products need to install and deploy plug-ins on the access system server. Although there are many plug-ins, specific plug-ins need to be deployed for different types and versions of operating systems and server products. The number is still limited. Once the access system uses an application that is not supported by the single sign-on product, then the single sign-on cannot be achieved without changing the access system architecture

[0006] 2. Difficult transformation and heavy workload when replacing single sign-on products

Once the single sign-on product is replaced, all the systems connected to the single sign-on product need to be rebuilt according to the requirements of the new single sign-on product, followed by a lot of development and testing work, which will inevitably affect the system The operation brings impact, but also brings many uncontrollable factors

[0007] 3. It is not conducive to timely location of faults

Since the communication between the plug-in and the authentication server is invisible to the access system, it is difficult for the operator of the access system to simply determine whether the fault is related to the single sign-on product when a fault occurs

Images