Pregled koncepata jedinstvene provjere autentičnosti korisnika i implementacija vlastitog sustava

master's thesis

• Title (english): Overview of Single Sign-on Concepts and Implementation of an Own One
• Author: Maro Miličević
• Mentor: Boris Milašinović (mentor)
• Committee member: Boris Milašinović (predsjednik povjerenstva)
• Committee member: Damir Kalpić (član povjerenstva)
• Committee member: Mirjana Domazet-Lošo (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2017-07-11, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

„Single sign-on“ sustavi su sve više prisutni u modernim aplikacijama kao glavno rješenje za prijavljivanje korisnika. U ovom radu su obrađeni osnovni koncepti OAuth 2.0 protokola, OpenID Connecta i SAML-a. Kao primjer implementacije vanjskog SSO sustava korišten je Google SSO. Detaljno je opisana komunikacija klijentske aplikacije i pružatelja usluge. Pri izradi vlastitog sustava jedinstvene provjere autentičnosti, korišten je razvojni okvir IdentityServer4 u ASP.NET Core web aplikaciji. Detaljno je opisana izrada osnovnog i naprednog prototipa pružatelja SSO usluge te je demonstriran rad cjelokupne aplikacije. Kod izrade naprednog prototipa opisani su razvojni okviri i paketi koji omogućuju povezivanje IdentityServera s SQL Server bazom podataka.

Abstract (english)

Single sign-on systems are becoming increasingly present in modern applications as a major user login solution. This paper deals with the basic concepts of OAuth 2.0 protocol, OpenID Connect, and SAML. As an example of implementing an external SSO system, Google SSO is used. Communication of client applications and service providers is described in detail. The IdentityServer4 development framework is used in an ASP.NET Core web application for creating an own SSO provider solution. The basic and advanced prototypes of the SSO provider are described in detail and the work of the entire application is demonstrated. In the development of the advanced prototype, frameworks and packages that enable the connection between IdentityServer and an SQL Server database are described.

• Keywords: Single sign-on; provjera autentičnosti; autorizacija; OAuth; OpenID Connect; SAML; IdentityServer4; ASP.NET Core; Web aplikacija
• Keywords (english): Single sign-on; authentication; authorization; OAuth; OpenID Connect; SAML; IdentityServer4; ASP.NET Core; Web application
• Language: croatian
• URN:NBN: urn:nbn:hr:168:485279
• Study programme: Title: Computing; Study programme type: university; Study level: graduate; Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Closed access
• Created on: 2019-03-13 23:08:55