IN-GROUP SERVICE AUTHORIZATION METHOD BY SINGLE SIGN-ON, IN-GROUP SERVICE PROVIDING SYSTEM USING THIS METHOD, AND EACH SERVER CONSTITUTING THIS SYSTEM

摘要

PROBLEM TO BE SOLVED: To easily perform proxy access within an organization (group) in an SSO environment.

SOLUTION: The in-group service authorization method includes a single sign-on process in which a service providing server authorizes authentication information; an authority transfer information inquiry process in which the service providing server inquires of an authentication server for authority transfer information when the authentication information lacks authority; a transfer information request process in which the authentication server requests a terminal the authentication transfer information; a transfer authority authentication process in which the authentication server authenticates the transfer authority information and generates authorization information; and a transfer authority authorization process in which the service providing server authorizes the authorization information. For example, an extension specification of SAML assertion is used for the authorization information.

COPYRIGHT: (C)2009,JPO&INPIT