Research of authorization and access control based on SAML
Pengfei Li, Yincheng Qi, Hao Na, Jing Hao · Telecommunications for Electric Power System · 2006
In the distributed computing environment,there are some limitations for different enterprises or organizations to share information.Especially,when enterprises adopt different techniques to realize the authority distribution and controlling mode,accessing and requesting across the system border makes it difficult and complex in establishing security strategies and realizing system management.SAML is a security description language based on XML,and is a platform and language independent,and can realize the interoperability for mode and system security service.This paper introduces SAML standard,SAML structure and SAML applications.To solve the authorization problems existing in traditional systems,an authorization framework based on SAML standard is designed.The SAML assertion is used to exchange user's authentication and authorization information to implement security integration of heterogeneous system.