Design And Implementation Of Unified User Management System Based On The SSO

With the development of network technology,companies,schools and government agencies are moving rapidly towards electronization,networking and mobilization.More and more applications are created by each apartment to meet the business requirement.Most of these systems are used independently,which has a separate system of user authentication and authority management.Thus the users must input the user name and password and so on to access each system.Switching among different systems will not only waste the users' time,but also reduce the users' productivity.Separate account and password system of each application would cause the users' memory disorder;different applications have different access mechanism,which is difficult to manage the users' information and unable to authorize.Therefore it is inconvenient to manage and maintain the system.In order to solve these problems,a unified user management system based on SSO is designed in this essay which assembled the users and permissions section to manage.The system is divided into three modules,the authentication center,the user rights management center and the single sign-on client.In the authentication center,the "uniform authentication" solution is adopted to solve the user single sign-on problem.In the user rights management center authority control is realized by using the scheme of unified access control management system.The administrator can manage the users' information,the users' role resources information and other information in unified management platform.The single sign-on client is integrated into the application system in the form of the SDK and is configured on the application system for some connection authorization parameters.The system can perform the unified authentication to the user identity and the unified management to the user permission so the users can log in at the authentication center only once in different application systems and can access other systems directly.They don't need not to input the authentication information every time and this system can improve the work efficiency of the users.There is no need to develop the permission management module when developing the new system.Thus the developing period is reduced and the developing cost is lowered.