Oracle OAM implements Angular JS front-end application SSO Single Sign-On tutorial, oamsso
Background:
With the development of the front-end framework, many front-end applications use Angular JS to implement front-end portals. How to Use OAM to implement a single point of failure for front-end portals is a problem. As we all know, it is much simpler to implement
Solve
Recently many friends in CSDN are discussing the issue of multiple system single sign-on. Now summarize the way you've used it to see if you can add some ideas to your friends.
Before dealing with the problem, discuss the case of so-called "multiple systems", in the sense that multiple systems will appear in the following several situations:
1. The technology used is different, the application platfor
Overview:
Single Sign On (SSO) is one of the most popular solutions for enterprise business integration.
SSO is defined in multiple application systems. Users only need to log on once to access all mutually trusted application systems.
SSO is a popular definition: SSO refers to the same user accessing protected resources in different applications of the same server. It only needs to log on once, that is, af
(String s:notfilter) {if (Url.indexof (s)! =-1) {//If the URI contains a non-filtered URI, it is not filtered DoFilter = false; Break; }}/* * if (uri.contains ("JSP") uri.indexof ("login.jsp") = =-1) {DoFilter * = tr Ue } */if (doFilter) {//Execute filter//Get the login entity final iusersession from session Userse Ssion = (iusersession) session.getattribute (iusersession.asia_session_name); if (usersession = = null) {//not logged on status if (null = = token) {Respon
-0006.jpg "border=" 0 "/>First we open the PowerShell for admin and then execute:Add-kdsrootkey–effectivetime (get-date). AddHours (-10).650) this.width=650; "height=" 359 "title=" clip_image011[4] "style=" margin:0px;border:0px;padding-top:0px; Padding-right:0px;padding-left:0px;background-image:none; "alt=" clip_image011[4] "src=" http://s3.51cto.com/ Wyfs02/m02/5a/d6/wkiol1t-bcbrkhqhaaeajmgcopg152.jpg "border=" 0 "/>Then we can create the ADFS Global service account and execute the following
IntroductionFor most Web ApplicationsProgramMany people prefer form verification. When many applications run in multiple subdomains under a primary domain, single sign-on is a good option. After you log on to www.exapmle.com, you can access resources of everything.example.com.
Form verification does not support this feature by default, but it is not complicated to adjust it by appropriate methods.
ASP.
[1]. Overview following the previous demonstration of single-point Logon (SSO) instance based on CAS, the server authentication mechanism adopts the default configuration of the test environment, this article will focus on how to query the database and configure authentication for the user name and password.[2] The Basic Environment of the demo environment is the same: Demonstration of Single
Recently I have studied the Sina CAS login process and found that Sina SSO implements Yale-CAs and adds a bit of new things. The interaction process of the basic authentication process remains unchanged. The original idea is to implement Single-point Ajax login, which is quite cool. The implementation principle is IFRAME +
Javascript Callback function.
I. Basic SSO
The basic SSO is to implement unified login under the same top-level domain name
in each branch.
OK, now describe the single sign-on process:
Scenario One, anonymous User: Anonymous user access to an authorization page on the sub-station a first jump to the main station to allow users to enter the account number, password for login, verify the main station voucher after the pass, and create a token, jump back to the substation A, at this point a detection of the user has a token, then
The recent use of CAs as a single point of authentication service found about 20 minutes later found that the general asynchronous way to refresh the page is no response (due to the use of the Easyui framework, page refresh is based on Ajax+div), has been considered a CAS service-side timeout problem, view the various configurations, Online also referred to a lot of posts, has not been resolved, today is not intended to remember is not the session exp
Single Sign-On CAS Usage Note (1): preparations and configuration of SSL protocol for CAS-Server, cas-serverssl
Knowledge point:
SSO: Single Sign-on(Single Sign On) is one of the most popular solutions for enterprise business inte
ASP. net mvc sso Single Sign-on design and implementation code, mvcsso
Lab environment Configuration
The HOST file is configured as follows:
127.0.0.1 app.com127.0.0.1 sso.com
The IIS configuration is as follows:
The application pool uses. Net Framework 4.0
Note that the domain name bound to IIS is two domain names that are completely different from each other.
The website configuration for app.com is as
CAS-based SSO Single Sign-On-achieving automatic ajax cross-origin access login, ssoajax
Make up the course first. You can set up the CAS environment on the following website.
[JA-SIG CAS service environment construction] http://linliangyi2007.iteye.com/blog/165307
[JA-SIG CAS Business Architecture Introduction] http://linliangyi2007.iteye.com/blog/165310
[JA-SIG CAS technical framework] http://linliangyi20
Single Sign-On Cas Server to connect to different data source configurations, casserver
Since there are many articles on download and Setup of Cas Server and Cas Client on the Internet, I will not describe them here. After the source code is imported into eclipse, it is as follows :( note: if the jar file is imported using maven, check whether the jar file is successfully downloaded)
Version: CasServer3.5
I am using a typecho system. I don't know how to do this. I want to find a detailed method or pay-as-you-go operation.
I am using a typecho system. I don't know how to do this. I want to find a detailed method or pay-as-you-go operation.
Reply content:
I am using a typecho system. I don't know how to do this. I want to find a detailed method or pay-as-you-go operation.
Single Sign-On is determined by
RSA encryption (asymmetric encryption) is used for Logon passwords when you use the single sign-on function of the general permission management system (girI Ga). For details about how to use this permission management system, refer.
For the front-end part, refer to the following js files:
Download: http://files.cnblogs.com/hnsongbiao/ExtJS.zip
Main Code at the front end of the logon page:
setMaxDigits(12
copy paste, click the login button to log inWebversionVCenter. 650) this.width=650; "title=" 4.jpg "style=" Float:none; "src=" http://s4.51cto.com/wyfs02/M00/8A/7E/ Wkiom1gyvuci0xycaabt6fe_luu448.jpg "alt=" Wkiom1gyvuci0xycaabt6fe_luu448.jpg "/>5 , login, click on the user name, will pop-up drop-down menu, choose to change the password, you can CMD The complex password generated in is set to a password that is easy to remember. 650) this.width=650; "title=" 5.jpg "style=" Float:none; "src=" htt
/2005/05/IDENTITY/CLAIMS/UPN"), query = " ; userPrincipalName; {0} ", param = c.value); 650) this.width=650; "title=" clip_image006 "style=" border-top:0px; border-right:0px; Background-image:none; border-bottom:0px; padding-top:0px; padding-left:0px; border-left:0px; margin:0px; padding-right:0px "border=" 0 "alt=" clip_image006 "src=" http://s3.51cto.com/wyfs02/M02/5B/7D/ Wkiol1ukil2htqm9aagox2niluk179.jpg "" "height=" 484 "/> When you are finished, we should see three rules on the Issuance Co
= none, otherwise can not correspond to SessionID cause cannot login, let alone synchronization. (Some irresponsible blogs actually say that the sync login needs to set this property to none!!!! Too much of a dad ... )),' Statepersister ' =>array (//Specify cookie Encrypted status file' Class ' = ' cstatepersister ',//specified class' Statefile ' = ' ... /commonlib/protected/runtime/state.bin ',//Configure the Common state file path, note that if your site is distributed, you must copy the file
Login Persistence mechanism: cookiessessionCookies: The information is stored to the client, all information is unsafe, the information is encrypted, the cookie stores the unique identity of the current session, that is, SessionID, he will also be stored on the server side, the client and his counterpart.Session: After the client has made a request to the server and returns a unique identity, that is, SessionID, his name is related to the current development language.After the SessionID is gener
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.