高校统一身份认证平台单点登录认证的实现———以营口职业技术学院为例

Implementation of Single Sign-On authentication on the unified identity authentication platform in universities: A case study of Yingkou Vocational and Technical College

摘要

现阶段,高校存在着业务系统繁多、多账号管理混乱、移动端集成不足的问题,给用户带来诸多不便.为解决这些问题,以营口职业技术学院为例,提出基于CAS与OAuth2.0协议相融合的统一身份认证方案,通过构建支持双协议的单点登录体系,采用CAS协议实现原有系统的二级域名无缝跳转,结合OAuth2.0协议完成企业微信生态集成与第三方服务授权.营口职业技术学院统一身份认证平台通过单点登录技术实现了一次登录访问多个系统的功能,极大地缩短了登录时间并减少了操作步骤.该方案对提高校园信息化管理效率,优化用户统一身份认证体验及强化移动服务生态集成度具有显著的促进作用.

Abstract

At present, there are some problems in colleges and universities such as numerous business systems, chaotic multi-account management and insufficient mobile integration, which bring many inconveniences to users. To solve these problems, this paper took Yingkou Vocational and Technical College as the research object and proposed a unified identity authentication solution based on the integration of CAS and OAuth2.0 protocols. By building a single sign-on system that supports both protocols, the CAS protocol is used to achieve seamless second-level domain redirection in the original systems, and the OAuth2.0 protocol is combined to complete the integration of the enterprise WeChat ecosystem and third-party service authorization. A unified identity authentication platform in Yingkou Vocational and Technical College implements SSO technology to allow access to multiple systems through a single login, which greatly reduced login time and operational steps. This solution plays a significant role in improving campus information management efficiency, optimizing unified authentication experiences, and strengthening mobile service ecosystem integration.

关键词

CAS / OAuth2.0 / 统一身份认证 / 单点登录技术

Key words

CAS / OAuth2.0 / unified identity authentication platform / single sign-on technology

参考文献

[1] 柯家海, 黄劲荣, 杜岭, 等. 高校统一身份认证平台的单点登录技术探究[J]. 自动化与信息工程, 2023, 44(6): 60-63.

[2] 郭晓宇. 统一认证授权技术浅析[J]. 网络安全和信息化, 2022(1): 24-26.

[3] CAS技术官网.CAS的定义和相关技术特点[EB/OL].[2024—12—21].https://www.apereo.org/projects/cas.

[4] 开放平台帮助中心.OAuth2接入说明[EB/OL].[2024—12—21].https://www.kancloud.cn/zytec/smilecampus_open/1023405.

[5] 肖桂霞. 基于B/S架构的Web单点登录协议综述[J]. 软件, 2023, 44(1): 1-5.

[6] 辉祥. 基于OAuth的分布式访问控制模型研究[D]. 北京: 北京工业大学, 2018.

[7] 张刚刚. 智慧校园下“企业微信+CAS”的统一身份认证方案设计[J]. 软件导刊, 2022, 21(1).