WebLogic-oriented Form identification single sign on integration method

A technology of identity authentication and single sign-on, applied in the field of single sign-on integration of Form identity authentication, which can solve the problems of inapplicability of identity authentication and inability to intercept.

CN102801808BInactive Publication Date: 2014-11-05WUHAN UNIV OF TECH
4 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Publication Date
2014-11-05
Estimated Expiration
Not applicable · inactive patent

Smart Images

  • Figure 1
    Figure 1
Patent Text Reader

Abstract

The invention relates to a WebLogic-oriented Form identification single sign on integration method. The method requires a single sign on filter, an identity service system and a unified user database, wherein the filter is deployed on a WebLogic application server adopting Form identification; for users not finishing identification, page login requests are acquired, and the filter guides the users to the identity service system; after the identity service system identifies the users, identity assurance including both user names and passwords, which are required for the users to login the WebLogic and acquired from the unified user database, is submitted to an identity assurance verification path on the WebLogic in an automatic POST manner; after the filter intercepts and validates the identity assurance, the users names and the passwords in the identity assurance are used for calling the WebLogic login method; and the users are guided to a protected website required to be accessed at the first time if the login is successful, otherwise, the users are guided to the login website for re-login and the passwords are updated.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The invention belongs to the technical field of identity authentication and access control of information security, in particular, it is a WebLogic-oriented Form identity authentication single sign-on integration method. Background technique

[0002] With the development of enterprise e-commerce and office informatization, enterprises and organizations have deployed a large number of information systems (hereinafter collectively referred to as application systems) that provide specific functions. In order to solve the problem that users need to memorize and input different user names and passwords when using different application systems, people have proposed the Single Sign On (SSO) technology. The so-called single sign-on means that the user only needs to use one identity credential (such as a user name, password, or a digital certificate) to complete online identity authentication (that is, login, login) in a certain system, and then he can access t...

Examples

Embodiment Construction

[0024] The present invention will be described in further detail below in conjunction with the accompanying drawings.

[0025] The present invention is a single sign-on integration method for WebLogic Form identity authentication, the overall structure of the method is as follows figure 1 As shown, including the single sign-on filter deployed on the WebLogic application server, the identity service system and the unified user database.

[0026] The single sign-on filter deployed on the WebLogic application server is to obtain the corresponding login page of the Web application for the intercepted HTTP request URL, and perform relevant processing as follows:

[0027] The first step: allow the HTTP request to obtain the login page to pass;

[0028] Step II: Intercept the HTTP response of the HTTP request, judge whether the user has completed identity authentication in the identity service system by information stored in the session (Session) object, if so, then replace the origin...