LDAP-based SSO Research And Design

As more and more application softwares/systems have been online services in the internet, users have to face a growing number of usernames and passwords combination. A complex user password combination often make users confusion and can not log in or access to needed services; while simple password combination lead to a high security risk, which makes higher price to manage the whole system for administrators. Therefore, a new authentication model is needed. In this new model, users can visit all the application allowed and use all the legal resources by one successful login. This new authentication model are wanted to improve the efficiency of network operation and reduce the cost of system operation in the maintenance, improve system security and reduce the difficulty of the user's login.In the traditional technology, we make identification authentication by using account and password, and use a decentralized management approach to manage users'information. All applications are mutually independent, that is, when the the user logs in the system by his user account which maps to the username (user ID), this kind of identification information is stored separately in various application systems which can not carried out transmission of information. The identification data can not be shared, which leads to the waste of resources and more complicated work of the system administrator.To get more convenient operation for administrators and users, an unified content management platform is proposed in this thesis. In this project, the problems of scattered resources, independent application systems and serious duplication of database are resolved. As one application, we construct the campus network of Heilongjiang Science Institute including unified authentication, management of users'information and registration of applications. which is based on the Lightweight Directory Access Protocol (LDAP protocol). In this application, we analyze current network conditions, user demand, and the current web services technology.