Web-based Single Sign-On Approach for the Authorization Server Using OAuth 2.0 Protocol in Academic System

Abstract

Users can access several services simultaneously by remembering just one valid login and password thanks to Single Sign On (SSO), an access control method. Using Oauth 2.0 technology, this research creates a system that offers Single Sign-On services via a web application. OAuth is a mechanism to streamline the data exchange flow process, which involves at least two applications interacting with one another. It is an entity that can provide access rights to protected resources. The resource is supplied by an application known as an Oauth Provider, and the application that receives it is known as an Oauth client. The purpose of this study is to develop and put into practice protocols for the OAuth 2.0 technology's operating mechanism, which involves server authorization—the server resource that handles client credential authentication and authorization. Three (three) client apps that implemented the OAuth 2.0 authentication work procedure were employed as single sign-on applications in this study. By using the Authorization Server role for OAuth 2.0 authentication, the client's credentials will be verified against the data kept in the database. This is accomplished by issuing an authorization page (Authorise App), which will direct users to the home page of each individual web application. The creation of an access token for every web application serves as the last line of verification for the accuracy of a client's credentials.