Single sign-on server, single sign-on method and computer readable storage medium

Abstract

The invention discloses a single sign-on server. The single sign-on server comprises a memory and a processor; a single sign-on program which can be run in the processor is stored in the memory. Whenthe program is carried out by the processor, steps below are realized: obtaining a sign-on request sent from a client to the server based on a reorientation information sent by a service system; obtaining account information from the sign-on request, obtaining a system identifier of the service system and an associated white list from the reorientation information and judging whether account information exists in the white list; if so, verifying the account information and a password in the sign-on request; if the verification passes, returning token information to the client for storage and storing the token information after the token information is associated with the account information of the client. The invention also provides a single sign-on method and a computer readable storage medium. According to the single sign-on server, the single sign-on method and the computer readable storage medium, a system code amount is reduced, the system reusability is improved, and centralizedmanagement of each service system authority in the single sign-on system is realized.

Description

technical field [0001] The present invention relates to the technical field of communication, in particular to a single sign-on server, method and computer-readable storage medium. Background technique [0002] The business scenario of the existing single sign-on system is generally: each business system adopts the same user system, the purpose is for the user to log in once, and the login result information can be shared among multiple systems, eliminating the trouble caused by repeated login operations . [0003] The operation security of such a single-point system is often relatively weak, and authorized application systems can be accessed, that is, after the user has a set of account information and password, the user can access all business systems in the single-point login system, which may cause some Very important information leakage, in order to avoid such problems, the existing mechanism is generally to establish a set of authority authentication system exclusive ...

AI Technical Summary

Problems solved by technology

[0003] The operation security of such a single-point system is often relatively weak, and authorized application systems can be accessed, that is, after the user has a set of account information and password, the user can access all business systems in the single-point login system, which may cause some Very important information leakage, in order to avoid such problems, the existing mechanism is generally to establish a set of authority authentication system exclusive to the business system in each business system. Permission authentication not only increases the amount of code, but the reusability of the system is poor, and it is not convenient for centralized maintenance of the permission management of the single sign-on system

Images