安全斷言標記語言SAML是讓互相信賴的雙方可以交換安全相關信息的一個XML架
構，它定義了不同系統之間安全服務交換認證和授權信息的機制，單點登錄技術SSO是實現集成身份認證和授權服務的有效方法，通過對傳統的SSO分析，提出一種基于SAML、利用PKI/PMI的單點登錄企業級的應用系統，有效解決跨域系統和異構應用平臺的一次認證、全程訪問的安全信息交換；成功在“金稅三期”資源整合中界面整合及門戶項目得到應用。
關鍵詞: 安全斷言標記語言；單點登錄；安全服務；認證；授權
Abstract: The Security Assertion Markup Language (SAML) is an XML framework for
exchanging security information between reliantly parties, it defines a mechanism for exchanging authentication and authorization information among different systems, Single Sign On (SSO) is an effective method which implement Integrated authentication and authorization。Base on analyze traditional SSO ,this paper discussed an effective application system using SAML and PKI/PMI technology , which resolved Security information exchange among heterogeneous system through once authentication realize full access. This technology was used successful in the project of “third of CTAIS”.
Key words: SAML；SSO；Web Services；Authentication；Authorization