This paper analyzes the network user login process to access network resources and authentication mechanisms，including network access authentication，directory services authentication and application authentication, makes a solution of complete integration of the three layers user login and authentication technologies to achieve Single Sign-On, including 802.1x，RADIUS, certification，directory service and so on. The solution in the actual production environment has been effectively applied.