| 摘要 |
<p>The embodiments of the invention disclose a method, an IdP, an SP and a system for identity federation, so that the provider is able to provide single sign-in services for users. The method comprises: when a UE is accessing a service provided by the SP, the IdP located in the network of the provider determines that the identification of the UE is finished, and then generates an UE ID in the IdP for the UE, associates the UE ID in the IdP with the ID of the SP, generates an acknowledgement and sends the acknowledgement to the SP; the SP receives the acknowledgement and validates the legality of the acknowledgement, then checks that an associated local account is not existed, and initiates a challenge of requiring sign-in to UE. After the UE finishes the sign-in, the SP associates the local UE ID in the SP and the ID of the IdP with the UE ID in the IdP.</p> |
