Single Sign-On SSO learning Summary

SSO English full name Single sign on, one-point login. SSO is a multi-application system in which users can access all trusted applications with only one login. When the user first accesses the application System 1, because has not logged in, will be booted to the authentication system to log in, according to the user provides the login information, the authentication system authenticates, if passes through the verification, should return to the user one authentication credential--ticket When the user accesses another application, it will take the ticket, as the credentials of their own authentication, and the application system will send the ticket to the authentication system for verification after receiving the request, and check the legality of ticket. If verified, the user can access application System 2 and application 3 without having to log in again.

Single Sign-on SSO the simple point is that in a multi-system coexistence environment, when a user logs in one place, they do not have to log in to other systems, that is, the user's login can be trusted by all other systems. Single Sign-on is used very frequently in large sites, such as Alibaba's Web site, behind the site is hundreds of subsystems, the user one operation or transaction may involve dozens of subsystems of collaboration, if each subsystem requires user authentication, not only users will go insane, The subsystems also go insane for this repetitive authentication authorization logic.

The learning materials are referenced in:

http://blog.csdn.net/cutesource/article/details/5838693