校务行政资讯系统单一签入与帐号整合之实作
The Practice of Academic Administration Information Portal and Single Sign-On Design Integration

作者: 林明灶 , 刘仲凯 :国立台北艺术大学电子计算机中心,台北;

关键词: 单一帐号登入校园行政系统资讯入口轻量级目录存取协定 Single Sign-On (SSO) Enterprise Information Portal (EIP) Lightweight Directory Access Protocol (LDAP)

摘要:

本文主要描述国立台北艺术大学(Taipei National University of the Arts, TNUA),在自主开发建置单一帐号签入统整各校务行政资讯系统的过程架构及方法。以分享系统实务流程经验,建构整合校园行政系统资讯入口(Enterprise Information Portal, EIP),及学校e-mail单一帐号登入(Single sign-on, SSO),便利使用教务系统、学务系统、人事系统、电子邮件、资讯查询等各项校园资讯系统,提供实务开发经验分享应用。开发流程重点于帐号管理设定、轻量级目录存取协定(Lightweight Directory Access Protocol, LDAP)资料架构设计及建置、LDAP应用程序接口、帐号开启系统及帐号整合机制规划。运用OpenLDAP原理延伸目录服务管理大幅降低软体建置成本,且资讯系统的程序开发语言皆有支持LDAP API,迅速修改系统认证机制,达成单一登入之开发。

Abstract: This paper mainly introduces the self-development of the integration of Single sign-on (SSO) and Enterprise Information Portal (EIP) for academic administration information system of TaipeiNationalUniversityof the Arts (TNUA). The purposes are to share the practical systems experience regarding EIP and email SSO, improve the convenience for using academic administration information systems including academic information system, student affairs system, human resource information system, email, information inquiry, etc. Besides, it could substantially reduce the development cost by applying the Open Lightweight Directory Access Protocol (OpenLDAP) theory and the developing system language could also support LDAP Application interface to efficiently revise system recognition mechanism to reach the SSO development. The key processes for this whole design include account management, data design and construction for Lightweight Directory Access Protocol and LDAP, application program interface (API) for LDAP, account opening system, and account integration design.

文章引用: 林明灶 , 刘仲凯 (2013) 校务行政资讯系统单一签入与帐号整合之实作。 软件工程与应用, 2, 109-117. doi: 10.12677/SEA.2013.25020

参考文献

[1] 周盟渊. 校务行政系统帐号整合[R]. 台北: 国立台湾师范大学电子计算机中心, 2011.

[2] T. Jackiewicz. Deploying openLDAP. New York: Apress, 2004.

[3] 蒋大伟. LDAP系統管理[M]. Taiwan Branch: O’Reilly, 2003.

[4] LDAP入门[URL]. 2008. http://www.l-penguin.idv.tw/article/ldap-1.htm

[5] OpenLDAP Foundation. OpenLDAP Software 2.3 Administrator’s Guide [URL]. 2008/2012. http://www.openldap.org/ doc/admin23/index.html

[6] 廖文渊. Sin-gle Sign-On(SSO)的优越融合-以IBM WebSphere Application Server V. 5和Lotus Notes/Domino 6为例[R]. 台北: 资策会数位教育研究所, 2004/2012.

[7] Microsoft Developer Network. 实作企业单一登入[URL]. 2009/ 2012. http://msdn.microsoft.com/zh-tw/library/aa558712(v=bts.10).aspx

[8] Microsoft Developer Network. SSO 安全性建议[URL]. 2009/ 2012. http://msdn.microsoft.com/zh-tw/library/aa560954(v=BTS.10).aspx

[9] Portals and Portlets: The Basics [URL]. 2006/2012. http://editorial.mcpressonline.com/web/mcpdf.nsf/wdocs/5232/$FILE/5232_EXP.pdf

分享
Top