文章分析了统一身份认证系统在知识共享平台建设中的必要性,提出了该系统总体框架。针对用户单点登录给出了一种利用安全声明标记语言(SAML)描述,基于kerberos协议的身份认证体系结构,同时,利用分布式目录树结构开发了用户身份和权限统一管理系统。在实现知识共享的同时,保证了资源的安全访问,提高了系统的使用效率。 The paper analyzes the necessity of unified identity authentication system in the construction of knowledge sharing platform and puts forward the overall framework of the system. In view of user single sign-on, an authentication architecture based on kerberos protocol, which is described by SAML, is developed. At the same time, a unified user identity and authority management system is developed by using distributed directory tree. At the same time of realizing knowledge sharing, it ensures the safe access of resources and improves the efficiency of system usage.