柯家海  黄劲荣  杜岭  程湛

（广州医科大学，广东 广州 511436）

摘要：针对高校的学生和教职工需要访问数量众多的信息系统，每个系统都需要单独的用户名和密码的问题，提出高校统一身份认证平台。首先，介绍高校统一身份认证平台的具体功能；然后，分析单点登录的3种常见技术：中央身份服务、全断言标记语言、开放授权；最后，结合学校情况，对高校统一身份认证平台的单点登录进行应用测试。测试结果表明，用户在通过单点登录后，所有系统都能同步登入，功能和性能满足需求。

关键词：高校统一身份认证平台；单点登录技术；中央身份服务；全断言标记语言；开放授权

中图分类号：TP391.4           文献标志码：A          文章编号：1674-2605(2023)06-0010-04

DOI：10.3969/j.issn.1674-2605.2023.06.010

Exploration of Single Sign on Technology for Unified Identity      Authentication Platform in Universities

KE Jiahai  HUANG Jinrong  DU Ling  CHENG Zhan

(Guangzhou Medical University, Guangzhou 511436, China)

Abstract: In response to the issue that students and faculty in universities need to access a large number of information systems, each system requires a separate username and password, a unified identity authentication platform for universities is proposed. Firstly, introduce the specific functions of the unified identity authentication platform for universities; Then, analyze the three common techniques of single sign on: central authentication service, security assertion markup language, open authorization; Finally, based on the situation of the school, conduct application testing on the single sign on of the unified identity authentication platform for universities. The test results show that after single sign on, users can log in to all systems synchronously, and the functionality and performance meet the requirements.

Keywords: unified identity authentication platform in universities; single sign on technology; CAS; SAML; OAuth