i. Title Single User Sign On Server ii. Author Mike Chen iii. Abstract I wish to provide Single User Sign On as a web service, so various applications can query the Single User Sign On Server for authentication and authorisation purposes. Administrators of Single User Sign On Server can also use a graphical interface to control who has access to what material. iv. What The Single Sign On Server will provide web service to applications. When an application authenticates a user, it will query the Single Sign On Server. The Single Sign On Server will return if the login is successful, and what kind of content that user can see. Single Sign On Server will also have an administrator interface for administrators to add, modify, delete user, and control what information the user can see. v. Why Currently at work, for each application I was comissioned to do, the customers all want some kind of administration functionality. While the specific requirements maybe slightly different, but the basic functionalities like add, update, delete user, and control contents to be displayed depending on user roles are always there. I would like to leverage the knowledge I have learnt during this course, and create a proof of concept, whereby User Administration functionalities can be abstracted out as a web service. Applications can focus on delivering business functionalities, while leaving the authentication and authorisation to the Single User Sign On Server vi. How The Single User Sign On Server will currently use XML to store user information, but the design will be flexible so later on, it can be migrated to database without much difficulties. The Single User Sign On Server will provide authentication services via SOAP. The application that uses this service will be a news reader application. User will need to log in, once logged in the user will have access to various news feeds from various content providers that supports RSS. The aggregated news will be transformed via XSLT. There will be an administrator interface using xlst, it will be able to add, update, and delete user and also control what news a particular user, or a group of user can see. vii. Question Can I create two instances of the webservers? one for news reader application and one for my administration interface? If so, how should i do it?