The invention discloses a Keyblock-based portal and subsystem authority linkage control method for integrating an LDAP (
Lightweight Directory Access Protocol), belongs to the technical field of identity
authentication and authority management, and aims to solve the technical problem of how to realize authority management of user data unification, portal centralized
authority control, subsystem authority flexibility, change real-
time synchronization and operation
traceability. In order to overcome the defects of user data dispersion, poor authority linkage and insufficient subsystem authority flexibility in the prior art, the technical scheme adopted by the invention is as follows: the method comprises the following steps of: centrally storing total user data of an enterprise by deploying an LDAP (
Lightweight Directory Access Protocol)
server, and realizing user
data synchronization and
authentication authorization by configuring a Keycloak
server; the portal
system synchronizes user data of LDAP and Keyblock through a timed task, a development subsystem management module and a
user management module realize permission batch management, and a permission change notification is pushed based on an
MQTT mechanism; and the subsystem is in
butt joint with the Key block to complete
authentication, receives the notification through the
MQTT and updates the local user permission in real time.