{"title":"用于遗留系统的基于saml的单点登录","authors":"Fengming Nie, Feng Xu, R. Qi","doi":"10.1109/ICAL.2012.6308228","DOIUrl":null,"url":null,"abstract":"The Single Sign-On is used for users to solve the logging in and the passwords managing problems in different application systems. However, the traditional SSO system cannot provide an appropriate solution for legacy systems which are independent and hardly modifiable. In order to solve the problem, we present a new SSO method based on the SAML legacy System. In this paper, the structure of the new method is given, the communication protocol between users and identity provider is defined, and the security of the method is analyzed. This method inserts the identity provider between systems and users without modifying them, authenticates the users by the SAML token, and implements the SSO in different application servers systems by auto form filling.","PeriodicalId":373152,"journal":{"name":"2012 IEEE International Conference on Automation and Logistics","volume":"4 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2012-09-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"9","resultStr":"{\"title\":\"SAML-based single sign-on for legacy system\",\"authors\":\"Fengming Nie, Feng Xu, R. Qi\",\"doi\":\"10.1109/ICAL.2012.6308228\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The Single Sign-On is used for users to solve the logging in and the passwords managing problems in different application systems. However, the traditional SSO system cannot provide an appropriate solution for legacy systems which are independent and hardly modifiable. In order to solve the problem, we present a new SSO method based on the SAML legacy System. In this paper, the structure of the new method is given, the communication protocol between users and identity provider is defined, and the security of the method is analyzed. This method inserts the identity provider between systems and users without modifying them, authenticates the users by the SAML token, and implements the SSO in different application servers systems by auto form filling.\",\"PeriodicalId\":373152,\"journal\":{\"name\":\"2012 IEEE International Conference on Automation and Logistics\",\"volume\":\"4 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2012-09-20\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"9\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"2012 IEEE International Conference on Automation and Logistics\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ICAL.2012.6308228\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"2012 IEEE International Conference on Automation and Logistics","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ICAL.2012.6308228","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
The Single Sign-On is used for users to solve the logging in and the passwords managing problems in different application systems. However, the traditional SSO system cannot provide an appropriate solution for legacy systems which are independent and hardly modifiable. In order to solve the problem, we present a new SSO method based on the SAML legacy System. In this paper, the structure of the new method is given, the communication protocol between users and identity provider is defined, and the security of the method is analyzed. This method inserts the identity provider between systems and users without modifying them, authenticates the users by the SAML token, and implements the SSO in different application servers systems by auto form filling.