[B! openid connect] k-holyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

k-holy id:k-holy

openid connectã«é–¢ã™ã‚‹k-holyã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

OAuth 2.0 + OpenID Connect ã®ãƒ•ãƒ«ã‚¹ã‚¯ãƒ©ãƒƒãƒå®Ÿè£…è€…ãŒçŸ¥è¦‹ã‚’èªžã‚‹
èªè¨¼ã¯å˜ç´”ãªæ¦‚å¿µã§ã€åˆ¥ã®è¨€è‘‰ã§è¨€ãˆã°æœ¬äººç¢ºèªã§ã™ã€‚Web ã‚µã‚¤ãƒˆã«ãŠã‘ã‚‹æœ¬äººç¢ºèªã®æœ€ã‚‚ä¸€èˆ¬çš„ãªæ–¹æ³•ã¯ ID ã¨ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã®çµ„ã‚’æç¤ºã—ã¦ã‚‚ã‚‰ã†ã“ã¨ã§ã™ãŒã€æŒ‡ç´‹ã‚„è™¹å½©ãªã©ã®ç”Ÿä½“æƒ…å ±ã‚’ç”¨ã„ãŸæœ¬äººç¢ºèªæ–¹æ³•ã‚‚ã‚ã‚Šãˆã¾ã™ã€‚ã©ã®ã‚ˆã†ãªç¢ºèªæ–¹æ³•ã ã¨ã—ã¦ã‚‚ (ãƒ¯ãƒ³ã‚¿ã‚¤ãƒ ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã‚’ä½¿ã£ãŸã‚Šã€2-way èªè¨¼ã ã£ãŸã‚Šã—ã¦ã‚‚)ã€èªè¨¼ã¨ã¯ã€èª°ãªã®ã‹ã‚’ç‰¹å®šã™ã‚‹ãŸã‚ã®å‡¦ç†ã§ã™ã€‚é–‹ç™ºè€…ã®è¨€è‘‰ã§ã“ã‚Œã‚’è¡¨ç¾ã™ã‚‹ã¨ã€ã€Œèªè¨¼ã¨ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®ä¸€æ„è˜åˆ¥åã‚’ç‰¹å®šã™ã‚‹å‡¦ç†ã€ã¨è¨€ãˆã¾ã™ã€‚ ä¸€æ–¹ã€èªå¯ã®ã»ã†ã¯ã€ã€Œèª°ãŒã€ã€ã€Œèª°ã«ã€ã€ã€Œä½•ã®æ¨©é™ã‚’ã€ã€ã¨ã„ã†ä¸‰ã¤ã®è¦ç´ ãŒå‡ºã¦ãã‚‹ãŸã‚ã€è¤‡é›‘ã«ãªã‚Šã¾ã™ã€‚åŠ ãˆã¦ã€è©±ã‚’ã‚„ã‚„ã“ã—ãã—ã¦ã„ã‚‹ã®ã¯ã€ã“ã®ä¸‰ã¤ã®è¦ç´ ã®ã†ã¡ã€ã€Œèª°ãŒã€ã‚’æ±ºã‚ã‚‹å‡¦ç†ãŒã€Œèªè¨¼å‡¦ç†ã€ã§ã‚ã‚‹ã¨ã„ã†ç‚¹ã§ã™ã€‚ã™ãªã‚ã¡ã€èªå¯å‡¦ç†ã«ã¯ãã®ä¸€éƒ¨ã¨ã—ã¦èªè¨¼å‡¦ç†ãŒå«ã¾ã‚Œã¦ã„ã‚‹ãŸã‚ã€è©±ãŒã‚„ã‚„ã“ã—ããªã£ã¦ã„ã‚‹ã®ã§ã™ã€‚ èªå¯ã®ä¸‰è¦ç´ ã‚’ã‚‚ã†å°‘ã—ç¾å ´ã«è¿‘ã„è¨€è‘‰ã§è¡¨
k-holy 2016/02/23
OAuth

openid connect
ãƒªãƒ³ã‚¯
[WAAD] OAuth2.0 ã¸ã®å¯¾å¿œçŠ¶æ³ã¾ã¨ã‚ï¼†ã¡ã‚‡ã“ã£ã¨ OpenID Connect ã‚‚
ã¾ãšåˆã‚ã«ãŠæ–ã‚Šã—ã¦ãŠãã¾ã™ãŒã€å…¬å¼ãƒªã‚½ãƒ¼ã‚¹ã§ã¯ Windows Azure Active Directory ã® OAuth2.0 ã¸ã®å¯¾å¿œè‡ªä½“ã¯ã‚¢ãƒŠã‚¦ãƒ³ã‚¹ã•ã‚Œã¦ã„ã¾ã™ãŒã€å†…å®¹ã«ã¤ã„ã¦æ˜Žç¢ºã«ã¯è¨€åŠãŒãªã„çŠ¶æ…‹ãªã®ã§ã€ã‚ãã¾ã§ä»Šæ—¥æ™‚ç‚¹ã§è‰²ã€…ã¨æŽ¢ç´¢ã—ãŸçµæžœã‚’æ›¸ã„ã¦ãŠã‚Šã€é–“é•ã„ã‚„ä»Šå¾Œã®å¤‰æ›´ãªã©ã¯é«˜ã„ç¢ºçŽ‡ã§ç™ºç”Ÿã™ã‚‹ã¨æ€ã‚ã‚Œã¾ã™ã€‚ã‚ãã¾ã§ã€ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆã‚’æŽ¢ã—ã¦å©ã„ã¦ã¿ãŸã‚‰ã“ã‚“ãªçµæžœãŒè¿”ã£ã¦ããŸã€ã¨ã„ã†çŠ¶æ…‹ã§ã‚ã‚‹ã¨ã”ç†è§£ãã ã•ã„ã€‚ ã•ã¦ã€å§‹ã‚ã¾ã™ã€‚ WAAD ã§ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚’è¿½åŠ ã™ã‚‹ã¨æ§˜ã€…ãªã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆãŒä»˜ä¸Žã•ã‚Œã¾ã™ã€‚ åŸºæœ¬çš„ã«ã¯ WAAD Authentication Libraryï¼ˆAALï¼‰ã‚’ä½¿ã£ã¦ã‚¢ã‚¯ã‚»ã‚¹ãƒˆãƒ¼ã‚¯ãƒ³ãªã©ã‚’å–å¾—ã™ã‚‹ã“ã¨ãŒå‰æã®ã‚ˆã†ã§ã™ãŒã€æŠ˜è§’ãã“ã« OAuth ã®ã‚¨ãƒ³ãƒ‰ãƒã‚¤ãƒ³ãƒˆãŒã‚ã‚‹ã®ã§å©ã„ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ ã¾ãšã€å©ãæ–¹ã§ã™ãŒã€å…ˆæ—¥æ—¥æœ¬èªžè¨³ãŒã•ã‚ŒãŸ OAuth2.0 ã®ä»•
k-holy 2013/08/05
oauth

openid connect
ãƒªãƒ³ã‚¯
Yahoo! JAPANã®OAuth 2.0&OpenID Connectå®Ÿè£…ã‚’è©¦ã—ã¦ã¿ãŸï¼ - r-weblife
ã“ã‚“ã°ã‚“ã¯ã€ritouã§ã™ã€‚ ä»Šå›žã®Y!Jã®æ–°æ©Ÿèƒ½ã¯æ°—ã®ã›ã„ã˜ã‚ƒãªã•ãã†ã ï¼ ã¨ã„ã†ã“ã¨ã§ã€ä»Šå›žã®ã‚¨ãƒ³ãƒˆãƒªã¯é•·ã„ã®ã§æ°—ã‚’ã¤ã‘ã¦ãã ã•ã„ã€‚ ä½•ãŒèµ·ã“ã£ãŸ ã“ã“ã«ã„ã‚ã„ã‚æ›¸ã„ã¦ã‚ã‚Šã¾ã™ã€‚ http://developer.yahoo.co.jp/yconnect/ åç§°ã¯YConnect OAuth 2.0ã®ä»•æ§˜ã«æº–æ‹ ã—ãŸ OpenID Connectã‚‚ã‚µãƒãƒ¼ãƒˆ "æº–æ‹ "ã¨"ã‚µãƒãƒ¼ãƒˆ"ã®ä½¿ã„åˆ†ã‘ãŒæ°—ã«ãªã‚Šã¾ã™ãŒã¾ãé€²ã‚ã¾ã—ã‚‡ã†ã€‚ OAuth 2.0 OAuth 2.0æº–æ‹ ã¨ã„ãˆã°mixiã§ã™ãã€‚ YConnectã§ã¯2ç¨®é¡žã®Clientã‹ã‚‰ã®åˆ©ç”¨ã‚’æƒ³å®šã—ã¦ã„ã¾ã™ã€‚ ã‚µãƒ¼ãƒãƒ¼ã‚µã‚¤ãƒ‰ ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚µã‚¤ãƒ‰ ãã‚Œãžã‚ŒConfidential/PublicãªClientã®ã“ã¨ã§ã™ãã€‚ æ—©é€Ÿç™»éŒ²ã—ã¦ã¿ã¾ã—ãŸã€‚ èª°ã‹ã‚‚è¨€ã£ã¦ã¾ã—ãŸãŒã€redirect_uriã®è¨å®šã¯ã„ã£ãŸã‚“ç™»éŒ²ã—ãŸå¾Œã«ç·¨é›†ã—ãªã„ã¨ã„ã‘ãªã„ã¨
k-holy 2013/08/02
oauth

openid connect
ãƒªãƒ³ã‚¯
https://oauth.jp/post/43684099914/json-web-token-jwt/
k-holy 2013/08/02
oauth

openid connect

jwt
ãƒªãƒ³ã‚¯
PDSã‚’å®Ÿç¾ã™ã‚‹ã«ã‚ãŸã£ã¦ã®æŠ€è¡“å‹•å‘ã®ç´¹ä»‹ (OAuth, OpenID Connect, UMAãªã©)
6. OP ã¨ RP é–“ã®ã‚„ã‚Šã¨ã‚Šã®ä»•çµ„ã¿ ãƒ¦ãƒ¼ã‚¶ RP OP GET ã‚¨ãƒ¼ã‚¸ã‚§ãƒ³ãƒˆ ï¼ˆãƒ–ãƒ©ã‚¦ã‚¶ï¼‰ ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã® https://www.google.com/accounts/o8/ è¦æ±‚ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®ãƒ— ID/ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ ud ãƒãƒˆã‚³ãƒ«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ &openid.ns=http://specs.openid.net/a OpenIDå…¥åŠ› â‘ ãƒ‡ã‚£ã‚¹ã‚«ãƒãƒª ã‚’ä»˜ä¸Ž uth/2.0 OpenIDï¼ˆURLï¼‰ â†‘ãƒ—ãƒãƒˆã‚³ãƒ«ãƒãƒ¼ã‚¸ãƒ§ãƒ³ ã«ã‚¢ã‚¯ã‚»ã‚¹ &openid.assoc_handle=AMlY****A9 OP ã®é€šä¿¡å…ˆ â†‘â‘¡ã§äº¤æ›ã—ãŸå…±æœ‰ç§˜å¯†éµã¸ã®å‚ç…§ã‚ãƒ¼ ç§˜å¯†éµã¸ã®å‚ç…§ ï¼ˆEndPoint URLï¼‰ç‰ã‚’è¿”å´ &openid.mode=checkid_setup ã‚ãƒ¼ã«ã‚ˆã‚‹ã€ãƒ¡ãƒƒã‚»ãƒ¼ â†‘ãƒ¢ãƒ¼ãƒ‰ï¼ˆèªè¨¼è¦æ±‚ï¼‰ ã‚¸ã®æ”¹ã–ã‚“å¯¾ç– â‘¡ã‚¢ã‚½ã‚·ã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ &ãƒ»ãƒ»ãƒ»ãƒ» å…±æœ‰ç§˜å¯†éµã®äº¤æ› GET https
k-holy 2013/08/01
openid connect
ãƒªãƒ³ã‚¯
ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚¤ã‚ºITã§ã®OpenID Connectåˆ©ç”¨ã‚¬ã‚¤ãƒ‰ãƒ©ã‚¤ãƒ³
2. Copyright 2013 OpenID Foundation Japan - All Rights Reserved. ç›®æ¬¡ ï® ã¯ã˜ã‚ã« ï® ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚—ã‚ºITã«ãŠã‘ã‚‹ãƒ•ã‚§ãƒ‡ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ã®è¦ä»¶ ï® ã‚¨ãƒ³ã‚¿ãƒ¼ãƒ—ãƒ©ã‚—ã‚ºITã«ãŠã‘ã‚‹OpenID Connectã®é©ç”¨ä¾‹ ï® ã¾ã¨ã‚ 1 3. Copyright 2013 OpenID Foundation Japan - All Rights Reserved. ã¯ã˜ã‚ã« ï® ç™»å ´äººç‰© ï¬ OP: ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹åˆ©ç”¨ä¼æ¥(ã®èªè¨¼ã‚·ã‚¹ãƒ†ãƒ ) ï¬ RP: ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹äº‹æ¥è€… ï¬ ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ã€ã‚µãƒ¼ãƒ“ã‚¹åˆ©ç”¨è€…: ã‚¯ãƒ©ã‚¦ãƒ‰ã‚µãƒ¼ãƒ“ã‚¹åˆ©ç”¨ ä¼æ¥ã®å¾“æ¥å“¡ ï® ä»Šå›žã¯ã€RPã¯ã‚µãƒ¼ãƒãƒ¼ã‚µã‚—ãƒ‰ã‚•ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã§ã‚ ã‚‹ã“ã¨ã‚’å‰æã¨ã—ã¦ã„ã‚‹ 2
k-holy 2013/08/01
openid connect
ãƒªãƒ³ã‚¯
ã€ŒOpenID Connectã€ã‚’ç†è§£ã™ã‚‹
OpenIDã®æœ€æ–°ä»•æ§˜ã€ŒOpenID Connectã€ã¨ã¯ å‰å›žã¯OpenIDã«ã¤ã„ã¦æŒ¯ã‚Šè¿”ã‚Šã¾ã—ãŸã€‚ç¶šãç¬¬4å›žã§ã¯ã€OpenIDã®æœ€æ–°ä»•æ§˜ã¨ã—ã¦ç–å®šãŒé€²ã‚ã‚‰ã‚Œã¦ã„ã‚‹ã€ŒOpenID Connectã€ï¼ˆæ³¨1ï¼‰ã«ã¤ã„ã¦ã€ è¨è¨ˆæ€æƒ³ ä»•æ§˜ä¸€è¦§ ãƒ•ãƒãƒ¼ç´¹ä»‹ å®Ÿè£…çŠ¶æ³ã¨ä»Šå¾Œ ã¨ã„ã†è»¸ã«æ²¿ã£ã¦ç´¹ä»‹ã—ã¾ã™ã€‚ OpenID Connectã®3ã¤ã®è¨è¨ˆæ€æƒ³ OpenID Connectã®è¨è¨ˆæ€æƒ³ã¨ã—ã¦ã€æ¬¡ã®3ç‚¹ãŒã‚ã‚Šã¾ã™ã€‚ ç°¡å˜ãªã“ã¨ã¯ç°¡å˜ã« é›£ã—ã„ã“ã¨ã‚‚å¯èƒ½ã« ãƒ¢ã‚¸ãƒ¥ãƒ©ãƒ¼ãƒ‡ã‚¶ã‚¤ãƒ³ ä»¥ä¸‹ã€ãã®è¨è¨ˆæ€æƒ³ãŒä»•æ§˜ã«ã©ã®ã‚ˆã†ã«åæ˜ ã•ã‚Œã¦ã„ã‚‹ã‹ã‚’ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ ç°¡å˜ãªã“ã¨ã¯ç°¡å˜ã« OpenIDã«ãŠã‘ã‚‹æœ€ä½Žé™ã®è¦ä»¶ã¨ã¯ã€ã€ŒOPï¼ˆOpenID Providerï¼‰-RPï¼ˆRelying Partyï¼‰é–“ã§èªè¨¼çµæžœã¨å±žæ€§æƒ…å ±ï¼ˆã‚¯ãƒ¬ãƒ¼ãƒ ï¼‰ã®å—ã‘æ¸¡ã—ãŒã§ãã‚‹ã“ã¨ã€ã§ã™ã€‚OpenID Connectã¯OAuth 2.0ã‚’ãƒ™ãƒ¼ã‚¹ã¨
k-holy 2013/08/01
openid connect
ãƒªãƒ³ã‚¯
OpenID Connectã¨SCIMã®æ¨™æº–åŒ–å‹•å‘
2. Copyright 2013 OpenID Foundation Japan - All Rights Reserved. IDç®¡ç†ã‚·ã‚¹ãƒ†ãƒ ãƒ—ãƒãƒ“ ã‚¸ãƒ§ãƒ‹ãƒ³ã‚° ã‚·ã‚¹ãƒ†ãƒ SSO / ã‚¢ã‚¯ã‚»ã‚¹ ç®¡ç† ã‚·ã‚¹ãƒ†ãƒ OpenID Connectã¨SCIM ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ» ãƒ—ãƒãƒ“ã‚¸ãƒ§ãƒ‹ãƒ³ã‚°API ï¼ˆSCIM Server) ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼å‘ã‘Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ ï¼ˆOpenID Connect RPï¼‰ ç¤¾å†…ã® ãƒ¦ãƒ¼ã‚¶ãƒ¼è¿½åŠ ãƒ» å¤‰æ›´ãƒ»å‰Šé™¤ ã‚µãƒ¼ãƒ“ã‚¹Aã® åˆ©ç”¨ ç®¡ç†è€… ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼ åˆ©ç”¨ä¼æ¥Aç¤¾ SaaS Aç¤¾ ãƒ¦ãƒ¼ã‚¶ãƒ¼ãƒ» ãƒ—ãƒãƒ“ã‚¸ãƒ§ãƒ‹ãƒ³ã‚°API ï¼ˆSCIM Server) ã‚¨ãƒ³ãƒ‰ãƒ¦ãƒ¼ã‚¶ãƒ¼å‘ã‘Web ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ ï¼ˆOpenID Connect RPï¼‰ SaaS Bç¤¾ ã‚µãƒ¼ãƒ“ã‚¹Bã® åˆ©ç”¨ SCIM APIã«å¾“ã„ã€ ã‚µãƒ¼ãƒ“ã‚¹Bã® ãƒ¦ãƒ¼ã‚¶ãƒ¼è¿½åŠ ãƒ» å¤‰æ›´ãƒ»å‰Šé™¤ SCIM APIã«å¾“ã„ã€ ã‚µãƒ¼ãƒ“ã‚¹
k-holy 2013/07/30
openid connect

slide
ãƒªãƒ³ã‚¯
ã¡ã‚‡ã£ã¨å‰ã«è©±é¡Œã«ãªã£ãŸOpenID Connectã®ä»•æ§˜ã¨ã¯ï¼Ÿ - r-weblife
OpenID Connectã§ã‚°ã‚°ã£ã¦ã¿ãŸã‚‚ã®ã®ã€ç´¹ä»‹è¨˜äº‹ã°ã‹ã‚Šã§ä¸èº«ã‚’èª¬æ˜Žã—ã¦ã‚‹äººãŒã‚ã‚“ã¾ã‚Šã„ãªã„ã‚ˆã†ã§ã—ãŸã€‚ ä»•æ§˜ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆï¼Ÿã‹ã©ã†ã‹ã‚ã‹ã‚Šã¾ã›ã‚“ãŒã€ã¾ã¨ã‚‚ãªãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯ http://openidconnect.com/ ã—ã‹ã‚ã‚Šã¾ã›ã‚“ã€‚ è‹±èªžèªã‚ã‚‹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãªã‚‰ã“ã‚Œèªã‚“ã§ã ã„ãŸã„ã‚ã‹ã£ã¦ã‚‹ã®ã‹ã‚‚ã—ã‚Œã¾ã›ã‚“ãŒã€ã–ã£ã¨ã¾ã¨ã‚ã¦ãŠãã¾ã™ã€‚ 3è¡Œã§èª¬æ˜Ž OAuth 2.0ã‚’ä½¿ã£ã¦ã€URLå½¢å¼ã®User Identifierã‚’è¿”ã™ User Identifierã¯ User Info APIã¨ã—ã¦å±žæ€§æƒ…å ±å–å¾—ã«åˆ©ç”¨ã§ãã‚‹ host-metaã‚’åˆ©ç”¨ã—ãŸç‹¬è‡ªDiscoveryã¨ã€Dynamicã«Clientç™»éŒ²ã®ã—ãã¿ãŒã‚ã‚‹ å‡¦ç†ãƒ•ãƒãƒ¼ OpenID Connect on Web Server Profile ã‚·ãƒ¼ã‚±ãƒ³ã‚¹ã¯ã“ã‚“ãªæ„Ÿã˜ã§ã™ãã€‚ ã“ã“ã§ã¯ã€ä¸€ç•ªå‡¦ç†ã®å¤šã„ã‚±ãƒ¼ã‚¹ã‚’è€ƒãˆã¾ã™ã€‚ æ¡ä»¶ã¯
k-holy 2011/07/29
oauth

openid connect
ãƒªãƒ³ã‚¯
1