Abstract:

With the rapid development of the enterprise informatization construction, the enterprise information applications are built in increasing numbers. It is an inevitable trend to establish a unified identity management system to provide single signon among the enterprise applications. The user is able to access different enterprise applications securely and smoothly by providing his or her identity information only once in enterprise identity authentication center. In this paper, a ticketbased single signon protocol and the design of a protocol reference implementation are proposed. The new protocol improves the limitation of the classical ticketbased single signon protocol such as Kerberos. It is easier and safer to implement single signon for enterprise applications with a lot of legacy accounts.

Key words: single signon;identity authentication;access management