Shulou(Shulou.com)06/01 Report--

This article is about how to carry out single sign-on authentication system MaxKey v 2.2.0RC example analysis, the editor feels very practical, so share with you to learn, I hope you can get something after reading this article, say no more, follow the editor to have a look.

MaxKey (Marx's key) single sign-on authentication system (Single Sign On System), which means the largest key, is a leading enterprise-level IAM identity management and authentication product. It supports OAuth 2.0/OpenID Connect, SAML 2.0, JWT, CAS, SCIM and other standard protocols, and provides simple, standard, secure and open user identity management (IDM), identity authentication (AM), single sign-on (SSO), RBAC rights management and resource management.

What is single sign-on (Single Sign On), or SSO for short?

Users only need to log in to the authentication center once to access all mutually trusted applications without having to log in again.

Main functions:

1. All applications share one identity authentication system

two。 All application systems can recognize and extract ticket information

Standard authentication protocol:

Serial number protocol supports 1OAuth 2.0/OpenID Connect high 2SAML 2.0 high 3JWT high 4CAS high 5FormBased 6TokenBased (Post/Cookie) low 7ExtendApi low 8EXT

Login support

Serial number login method 1 dynamic verification code letter / number / arithmetic 2 two-factor authentication 3 SMS authentication Tencent Cloud SMS / Aliyun SMS / net Yiyunxin 4Google/Microsoft Authenticator/FreeOTP/ supports TOTP or HOTP5Kerberos/SPNEGO/ AD domain 6 social account Wechat / QQ/ Weibo / nail / Google/Facebook/ other

Provide a standard authentication interface for other applications to integrate SSO, secure mobile access, secure API, third-party authentication and Internet authentication.

Provide user lifecycle management, support SCIM 2 protocol, based on Apache Kafka agent, through the connector (Connector) to achieve identity synchronization.

The certification authority has platform independence and environment diversity, and supports Web, mobile phones, mobile devices, such as Apple iOS,Andriod, etc., covering all aspects of authentication capabilities from BAccord S to mobile applications.

A variety of authentication mechanisms coexist, each application system can retain the original authentication mechanism, while integrating the authentication of the certification center; the application is highly independent, does not rely on the certification center, and can use the authentication of the certification authority to achieve single sign-on.

Based on Java platform development, using Spring, MySQL, Tomcat, Apache Kafka, Redis and other open source technologies, support micro-services, strong scalability.

License Apache License, Version 2.0, open source free.

Interface

MaxKey certification

Login Page

Main interface

MaxKey management

Access report

User management

Application management

download

Download the current version of Baidu online disk, the historical version

Version date download address extraction code v 2.2.0 RC2020/09/04 link download pzzwRoadmap

Batch organization and user import based on Excel

User registration function

Dynamic user group implementation (based on user attributes or institutions)

Version description

MaxKey v 2.2.0 RC 2020-09-04

(MAXKEY-200801) content adjustment of the official website, initial increase of English version support, increase of news, partners and comparison with CAS and other open source products (MAXKEY-200802) use Passay enhanced password policy, separate static password policy and dynamic password policy (MAXKEY-200803) to repair login failure messages, and support internationalization (MAXKEY-200804) to optimize the password modification process. Add password policy matching and prompt message (MAXKEY-200805) CAS protocol add custom parameter backhaul (MAXKEY-200806) optimize development integration guide (MAXKEY-200807) delete redundant files and folders (MAXKEY-200808) optimize application adapter support (MAXKEY-200809) Maven version support (MAXKEY-200810) CAS spring boot demo (MAXKEY-200811) MGT management access cannot find page repair (MAXKEY-200812) MGT management Password modification adds automatic password generation (MAXKEY-200813) optimizes the configuration of TOKENBASED token content (MAXKEY-200814) fixes initialization passwords and errors after password expiration modification (MAXKEY-200815) fixes OAuth 2.0 management side skips confirmation prompt cannot be modified (MAXKEY-200816) closes correction (MAXKEY-200817) password errors for more than 6 times For more than set time automatic unlocking (MAXKEY-200818) MySQL time problem, see https://dev.mysql.com/doc/refman/8.0/en/time-zone-support.html(MAXKEY-200819) MGT Management homepage Statistical Optimization (MAXKEY-200820) SCIM 2 Server function Optimization (MAXKEY-200821) internationalization I18N content Optimization (MAXKEY-200822) dependent jar upgrade

Passay 1.6.0

SpringBoot 2.3.3.RELEASE

SpringSecurity 5.3.4.RELEASE

Hibernate 6.1.5.Final

Jackson 2.11.2

The above is the example analysis of how to carry out the single sign-on authentication system MaxKey v 2.2.0RC. The editor believes that there are some knowledge points that we may see or use in our daily work. I hope you can learn more from this article. For more details, please follow the industry information channel.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.