2013年7月28日日曜日

Authentication basic knowledge useful link

1.Basic Auth
In the context of an HTTP transaction, basic access authentication is a method for an HTTP user agent to provide a user name and password when making a request Contents.
HTTP Basic authentication (BA) implementation is the simplest technique for enforcing access controls to web resources because it doesn't require cookies,
session identifier and login pages. Rather, HTTP Basic authentication uses static, standard HTTP headers which means that no handshakes have to be done in anticipation.

Because of this, BA is frequently used where a restricted URL needs to be accessed programmatically, especially from shell scripts or batch files.
As a standard protocol, username and password for BA can be passed in URL, for example:

curl -u user:password -d "source=10001&status=api test" http://api.t.sina.com.cn/update.xml
Learn more, you can refer to:
http://en.wikipedia.org/wiki/Basic_authentication_scheme

2.Federated Authentication
A federated identity in information technology is the means of linking a person's electronic identity and attributes, stored across multiple distinct identity management systems.

Related to federated identity is single sign-on (SSO), in which a user's single authentication ticket, or token,is trusted across multiple IT systems or even organizations. SSO is a subset of federated identity management,as it relates only to authentication and is understood on the level of technical interoperability.
Federated identity is best described as:
    Two or more applications that share the same set of users.
    Two or more organizations that share the same set of users.
    Two or more organizations that share an identity provider.
    One organization trusting users from one or more other organizations to access its applications.

Learn more:
http://msdn.microsoft.com/en-us/library/ff359110.aspx
http://www.wikidata.org/wiki/Q912297#sitelinks-wikipedia
http://en.wikipedia.org/wiki/Federated_identity

3.IDP Initiated Federated Authentication
  SP Initiated Federated Authentication
IdP(ID Provider)
SP(Service Provider)



Learn more:
http://baike.baidu.com/view/6402108.htm
http://open.weibo.com/wiki/Basic_Auth
http://www.cnblogs.com/QLeelulu/archive/2009/11/22/1607898.html
http://msdn.microsoft.com/en-us/library/ff359110.aspx

0 件のコメント :

コメントを投稿