A cross-domain single sign-on method for system integration

Abstract

The invention discloses a cross-domain single sign-on method for system integration. The method comprises steps: 1) when a user firstly accesses a subsystem, proxy service intercepts the request and jumping to a unified sign-on interface is carried out; 2) the user fills information such as the username and the password in the sign-on interface; 3) a single sign-on server verifies the user information, and a unique authorization code is generated; 4) a simulated sign-on mode is used to send the authorization code and the sign-on information to all systems; and 5) when the user uses the authorization code to access the system or other systems again, sign-on again is not needed. The cross-domain single sign-on method for system integration has the advantages that the configuration is simple; the original system code is not invaded; seamless access to systems crossing domains and distributed under multiple domain names can be realized, and the method is applicable to a high-concurrency scene, and supports a time-limiting sign-on-free feature.

Description

technical field [0001] The invention belongs to the technical field of computer applications, in particular to a system integration-oriented cross-domain single sign-on method. Background technique [0002] During system integration, multiple independent subsystems need to be centrally managed, and the subsystems are developed independently. Each subsystem uses its own login function. Therefore, when users switch between multiple subsystems, they need to enter the user name and password multiple times, which is serious. It greatly affects the user experience, and also brings pressure to the user to manage numerous account passwords. [0003] The single sign-on technology is to solve the problems existing in the above-mentioned system integration. After the user logs in to any subsystem under the system platform, he does not need to enter the user name and password again to access other subsystems. This technology assigns all the work of identity verification and rights mana...

AI Technical Summary

Problems solved by technology

[0005] (1) Some systems already provide login functions, while some systems do not have login entries

[0006] (2) Different subsystems may be deployed in different domains

Among them, the first method has limitations in timeliness control and requires intrusion into the original system; the second method requires verification every time you visit, and the verification server is under a lot of pressure; the third method has relatively large restrictions on users, and all operations Needs to be done on the integration portal

Images