Using Kerberos protocol for Single Sign-On in Identity Management Systems

Abstract

Today, identity management systems are widely used in different types of organizations, from academic and government institutions to large enterprises. An important feature of identity management systems is the Single Sign-On functionality. Single Sign-On allows users to authenticate once, and freely use all services and resources available to them afterwards. In this paper, we present the usage of Kerberos in identity management systems. An overview of Kerberos protocol, state of the art of identity management systems and different generic architectures for identity management is given in the paper. Also, we present a Single Sign-On identity management architecture proposal based on Kerberos protocol, and discuss its properties. Special attention was given to authentication, authorization and auditing.

An Improved Single Sign-On Model: Design and Implementation

“…(11)The application server conducts access control, connecting the database application system, transferring the access request to the database. The database server processes the request and returns operation results to the application server (12)The application server returns the result to the client browser. Figure 6 illustrates the system working process.…”

Identity management for Web business communications

“…Enterprise SSO relies on centralized directories services such as Microsoft Active Directory to which the enterprise's internal applications connect for user authentication. Although there are several flavors of enterprise SSO [8] (e.g., cache-based or password synchronization systems), authentication and directory technologies such as Kerberos and LDAP, respectively, are commonly used [11].…”