Design of A Ticket-Based Single Sign-On Protocol

With the development of enterprise information technology, the category and quantity of the enterprise information application system becomes more and more. It's a inevitable trend to establish a enterprise unified identity management system to provide single sign-on among the application systems. In this paper, a ticket-based single sign-on protocol and the design of a protocol reference implementation are proposed. The new protocol improves the limitation of the classical ticket-based single sign-on protocol such as Kerberos. It is easier and safer to implement single sign-on for application systems with a lot of legacy accounts.