Single-point logging-out method and device

Abstract

The invention provides a single-point logging-out method applied to a client side. The single-point logging-out method comprises the following steps of: receiving logging-out request operation input by a user; sending a logging-out request to a CAS (Center Authenticate Service) server according to the operation so as to lead the CAS server to call a logging-out page on the basis of the logging-out request, wherein the logging-out page includes a first logging-out script and a second logging-out script, the first logging-out script is used for indicating that sub-servers are respectively notified to cancel user session information storage, and the second logging-out script is used for indicating logging out of the CAS server; and based on the logging-out page, indicating that single-point logging-in mapping relationships between the CAS server and the sub-servers are respectively disconnected, and indicating the CAS server to cancel a user credential of the user. The single-point logging-out method provided by the invention has the advantages that the client side notifies the sub-servers to cancel the user session information storage and indicates the CAS server to cancel the user credential of the user, so that the information flow in the logging-out process is improved and the communication load among the servers is reduced; and since both global Filter registration and Map maintenance are not needed for the sub-servers, the implementation cost of the sub-servers in single-point logging out is reduced.

Description

technical field [0001] The present invention relates to the field of Internet applications, and more specifically, relates to a single logout method and device. Background technique [0002] SSO (Single Sign On) is one of the more popular enterprise business integration solutions. The definition of SSO is that in multiple application systems, users only need to log in once to access all mutually trusted application systems. [0003] As the reverse operation of single sign-on, single sign-out In multiple application systems, users only need to log out once to log out of all systems. [0004] In the prior art, the single logout process is as follows: the client sends a logout request to the CAS (Center Authenticate Service, center authentication service) server (server); the CAS server completes the logout operation; the CAS Server notifies the client to complete the logout; The CAS server notifies the sub-server that the user credentials are invalid; the sub-server destroys...

AI Technical Summary

Problems solved by technology

[0006] In view of this, this application provides a method and device for single-point logout, which solves the problem of high implementation cost of the sub-server in the case of single-point logout in the prior art

Images