基于联盟认证的单点登录能够认证不同组织的用户,但资源的多样化导致了管理上的困难。针对该问题,采用Shibboleth联盟认证方式,规范多种资源访问的REST API接口,并借助Shibboleth的属性筛选策略发布访问资源的授权码,实现多组织用户访...基于联盟认证的单点登录能够认证不同组织的用户,但资源的多样化导致了管理上的困难。针对该问题,采用Shibboleth联盟认证方式,规范多种资源访问的REST API接口,并借助Shibboleth的属性筛选策略发布访问资源的授权码,实现多组织用户访问多种复杂资源的统一认证。以基于Open Ed X的在线实验平台为例,解决了平台中统一认证以及复杂资源授权的问题,验证了采用Shibboleth进行用户统一认证,通过REST API接口以及授权码的发布可实现复杂资源共享,并在Open Ed X上以XBlock的方式实现与其余系统的数据交互。展开更多
The notion of this project is derived from our practical use of user authentication system namely Shibboleth at the University of Bedfordshire. It has been found that the University of Bedfordshire controls its variou...The notion of this project is derived from our practical use of user authentication system namely Shibboleth at the University of Bedfordshire. It has been found that the University of Bedfordshire controls its various services including student portal Breo, Learning Resources and Student Email Access and others through the Shibboleth. Like the University of Bedfordshire the other Universities in the UK are also implementing the Shibboleth system in their access management control. Therefore, the researchers of this project have found it important to evaluate its efficiency and effectiveness of Shibboleth from different perspectives. In the first part of this paper it tries to explain the features of Shibboleth as SSO services and compares it with other SSO services like Athens, Kerberos, etc. Then in the middle section, the authors go through the steps of installation and configuration of the Shibboleth. In the end of the paper, based on the survey of real users of Shibboleth at the University of Bedfordshire, the authors give its insights on the effectiveness of the Shibboleth as SSO service. Throughout this investigation, the authors have applied a triangulation to find out user and service provider viewpoint about Shibboleth. Although there were some problems persisted, the authors also implemented the Shibboleth system successfully to figure out different problems, efficiency and effectiveness. The recommendations and conclusion have been provided at the end of this project.展开更多
文摘基于联盟认证的单点登录能够认证不同组织的用户,但资源的多样化导致了管理上的困难。针对该问题,采用Shibboleth联盟认证方式,规范多种资源访问的REST API接口,并借助Shibboleth的属性筛选策略发布访问资源的授权码,实现多组织用户访问多种复杂资源的统一认证。以基于Open Ed X的在线实验平台为例,解决了平台中统一认证以及复杂资源授权的问题,验证了采用Shibboleth进行用户统一认证,通过REST API接口以及授权码的发布可实现复杂资源共享,并在Open Ed X上以XBlock的方式实现与其余系统的数据交互。
文摘The notion of this project is derived from our practical use of user authentication system namely Shibboleth at the University of Bedfordshire. It has been found that the University of Bedfordshire controls its various services including student portal Breo, Learning Resources and Student Email Access and others through the Shibboleth. Like the University of Bedfordshire the other Universities in the UK are also implementing the Shibboleth system in their access management control. Therefore, the researchers of this project have found it important to evaluate its efficiency and effectiveness of Shibboleth from different perspectives. In the first part of this paper it tries to explain the features of Shibboleth as SSO services and compares it with other SSO services like Athens, Kerberos, etc. Then in the middle section, the authors go through the steps of installation and configuration of the Shibboleth. In the end of the paper, based on the survey of real users of Shibboleth at the University of Bedfordshire, the authors give its insights on the effectiveness of the Shibboleth as SSO service. Throughout this investigation, the authors have applied a triangulation to find out user and service provider viewpoint about Shibboleth. Although there were some problems persisted, the authors also implemented the Shibboleth system successfully to figure out different problems, efficiency and effectiveness. The recommendations and conclusion have been provided at the end of this project.
