文章分析了統一身份認證系統在知識共享平臺建設中的必要性，提出了該系統總體框架。針對用戶單點登錄給出了一種利用安全聲明標記語言（SAML）描述，基于kerberos協議的身份認證體系結構，同時，利用分布式目錄樹結構開發了用戶身份和權限統一管理系統。在實現知識共享的同時，保證了資源的安全訪問，提高了系統的使用效率。
Abstract：This paper investigates the importance of uniform identity authentication system for building knowledge sharing platform, and presents the general framework of this system. An architecture based on kerberos Protocol and Security Assertion Markup Language is used to solve the issue of the Single User Sign-on to Multiple Services. This paper also discusses the issue of organizing user’s id and access control lists with the distributed directory tree method, and a real application model is presented. This system can provide a very effective and secure access on knowledge sharing system.
Key words: Authentication, knowledge sharing,single sign_on, Client Credential Management