Single Sign-on, called Sso,sso, is not only used in enterprise-level development, but is also a big line in the Internet. Just to give a few examples, such as when we login Sina Weibo, and then visit Sina home page, we found that has been automatically logged in, such as we log in csdn, can write blog, visit the forum, download resources and so on. The former is a fully cross-domain
Fruit Network-focus on it online www.prismcollege.com1, follow the following major links to the tutorial, the Base64,client,phpfunctions,uc,xmlhelper to join the Web program.2, modify Web. XML, join3, add new applications in Uccenter, application managementAdd apps in Background uccenter, set up syncMain URL of the app: (Your Java Web program's home directory, such as Http://localhost:8080/demo)Application interface file name default this uc.php, do not precede the API. It will automatically add
First, Single Sign-On must depend on the client, that is, the client must return the ID to the server. This is the principle.
There are three basic single-point logon solutions.
1. Session
2. Cookies
3. url
Because the client can only save the three basic information
1. Session: The session depends on the sessionid of the client, and the sessionid
Document directory
What is single sign-on?
Technical Implementation Mechanism of Single Sign-on
Realization of WEB-SSO
Postscript
What is single sign-on?
Single
This article mainly introduces PHP implementation of SSO Single sign-on system access function, simple analysis of SSO single Sign-on system access principle and PHP related implementation skills, the need for friends can refer to the next
SSO English full name Single
Basic System Architecture
Assume that a system includes three independent websites: Service Customer Service Center, shop online shopping center, and office online office center. The Service manages the customer's information, logon and logout processes. No matter whether the customer accesses any page of the system, the system will go to the logon interface. After the user logs on, the system will automatically transfer to the page requested by the customer. In addition, you can seamlessly sw
Basic Architecture
Assume that a system includes three independent websites: Service Customer Service Center, shop online shopping center, and office online office center. The Service manages the customer's information, logon and logout processes. No matter whether the customer accesses any page of the system, the system will go to the logon interface. After the user logs on, the system will automatically transfer to the page requested by the customer. In addition, you can seamlessly switch bet
sso authentication center deregister a global session
@ RequestMapping ("/logout") public String logout (HttpServletRequest req) {HttpSession session = req. getSession (); if (session! = Null) {session. invalidate (); // trigger LogoutListener} return "redirect :/";}
The sso authentication center has a listener for global sessions. once a global session is canceled, all registration systems are notified to log out.
Public class LogoutListener implements HttpSessionListener {@ Override public
sub-station.OK, now describe the single sign-on process:Situation one, anonymous user: Anonymous user access to a licensing page on the station A, first jump to the main station let the user enter the account number, password to log in, verify through the generation of Master station credentials, at the same time generate tokens, jump back to the station A, at this time station a detected that the user has
The Microsoft Windows Server 2003 operating system implements the authentication protocol for Kerberos version 5. Windows Server 2003 also extends public key authentication. The client for Kerberos authentication is implemented as a SSP (security support provider) that can be accessed through SSPI (Security Support Provider Interface. Initial User Authentication was integrated with Winlogon's Single Sign-On
Single Sign-on is one of my favorite technical solutions, and he can improve the convenience of the use of the product, on the other hand, he separated the needs of each application of the login services, performance and workload are good. Since the last study of how JWT has been applied to session management, and the use of CAs as a popular single
SSO Single Sign-on PHP implementation method (Laravel framework), Ssolaravel
Laravel is a simple, elegant PHP Web development Framework (PHP Web framework). It frees you from the messy code of noodles, and it helps you build a perfect web app, and every line of code can be concise and expressive.
Simply say my logic and I don't know if I understand SSO right.
If three sites a.baidu.com b.baidu.com c.baidu.
The example in this article describes the SSO single Sign-on implementation method for PHP. Share to everyone for your reference. The specific analysis is as follows:
Here are a few details:1, click the login to jump to the SSO login page and with the current application of the callback address2, after the successful login to generate cookies and pass the cookie to the callback address3, callback address t
1. What is single sign-on.
Single sign-on refers to the need to authenticate users only once in multiple application systems, can be accessed in each system, with two core features, one for centralized authentication, and the second for distributed environments that apply to multiple systems--if it's just an applicati
This article mainly introduces the ASP. NET MVC SSO Single Sign-on design and implementation, with a certain reference value, interested can understand.
Lab Environment Configuration
The host file is configured as follows:
127.0.0.1 app.com127.0.0.1 sso.com
IIS is configured as follows:
Application pools with the. Net Framework 4.0
Note The IIS-bound domain name, two completely different domain names.
Th
1. Preparation: Privilege system, subsystem, distributed cache2. Login permission system, by verifying that the user name password is correct to determine whether the login is successful, log in successfully, the user name and ID encryption as key, the user information as value in the cache.3. Get the key and timestamp in the privilege system to jump to the subsystem home page4. After the subsystem is decrypted to determine whether the timestamp expires, but the period, the key as a session in t
Sso single sign-on PHP implementation (Laravel framework) my blog address: Luo Zhiqiang's blog is welcome to exchange links and exchange ideas.
Simply put, I don't know whether I understand sso or not.
Assume that the three sites a.baidu.com B .baidu.com c.baidu.com
A.baidu.com.B and c are used as clients (subsystems ).
B and c jump to a when they need to log on, and contain the source parameter to ind
=xxxxxxxxxxxxxxxx ")
B Station make a global filter, accept this ticket and then request a station to verify whether ticket is a generated.
B Station filter App\http\middleware\casauthenticate code, here to determine whether there is a ticket and send a request to a station check. If it is logged in, then get the user uid to login.
The logic is complete, but there are a few questions.
1. I realize this, I do not know whether it is right, which I wrote according to the principle.
2. If B station
Environment Description:1. Windows Server R2 Server (Windows Azure VM)Roles: Domain controllers, directory synchronization, ADFS servicesNetwork segment: 192.168.0.102. Windows Server R2 Server (Windows Azure VM)Role: WAP (ADFS Proxy)Network segment: 192.168.1.103. Lab Domain:hphaobo.com (registered with the public network)4. Account:hphaobo\exadmin5. Public network certificate name: fxproxy.hphaobo.comEnvironment Architecture:650) this.width=650; "title=" clip_image002 "style=" border-top:0px;
In a word, it is possible to bring different domain names back to the same authentication information.The way to do this is to put one of the authentication information stored in a different domain under a cookie after landing,When verifying whether or not to log in, the cookie is validated, and if it is a subdomain, this is set to the top of the scope directly with the cookie.The following is a different domain name, which is the use of script function, respectively, to visit each page, such as
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.