[B! keycloak] yassan0627ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

yassan0627 id:yassan0627

keycloakã«é–¢ã™ã‚‹yassan0627ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (9)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Keycloakã®å®Ÿéš›ãƒ»ç¿»è¨³ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆç´¹ä»‹
2. Copyrightï¼ˆCï¼‰ Nomura Research Institute, Ltd. All rights reserved. 1 ï® å’Œç”° åºƒä¹‹ @wadahiro ï¬ é‡Žæ‘ç·åˆç ”ç©¶æ‰€ ï¬ ä¸»ã«OSSç³» (OpenStandia) æ‹…å½“ ï¬ ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£æ´»å‹• â–ªKeycloak æ—¥æœ¬èªžåŒ–å¯¾å¿œã‚„ãƒ‘ãƒƒãƒã®Contributor â–ªKeycloak è„†å¼±æ€§å ±å‘Š (CVE-2016-8609) â–ªãã®ä»–ã€å„ç¨®ãƒ©ã‚¤ãƒ–ãƒ©ãƒª(React.js/Jenkins, Bitbucketãƒ—ãƒ©ã‚°ã‚¤ãƒ³ etc.)ã® Contributeãªã© â–ªQiitaã§ã‚‚ãŸã¾ã«è¨˜äº‹ã‚’æ›¸ã„ã¦ã„ã¾ã™ (è¿‘å¹´ã¯ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰æˆåˆ†å¤šã‚) â–ªä»Šå¹´ã¯Keycloakã®Advent Calendarã‚’ ã‚„ã‚Šã¾ã™ï¼ https://qiita.com/advent-calendar/2017/keycloak-by-openstan
yassan0627 2018/01/17
keycloak

ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡
ãƒªãƒ³ã‚¯
Keycloak by OpenStandia - Qiita Advent Calendar 2017 - Qiita
NRIã¯ã€Œã‚³ãƒ³ã‚µãƒ«ãƒ†ã‚£ãƒ³ã‚°ã€ã€Œé‡‘èž ITã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã€ã€Œç”£æ¥ ITã‚½ãƒªãƒ¥ãƒ¼ã‚·ãƒ§ãƒ³ã€ã€ŒIT åŸºç›¤ã‚µãƒ¼ãƒ“ã‚¹ã€ã®4äº‹æ¥ã§ãŠå®¢æ§˜ã®ãƒ“ã‚¸ãƒã‚¹ã‚„å¿«é©ãªç¤¾ä¼šã€æš®ã‚‰ã—ã‚’æ”¯ãˆã¦ã„ã¾ã™ã€‚â€»å„è¨˜äº‹ã®å†…å®¹ã¯å€‹äººã®è¦‹è§£ã§ã‚ã‚Šã€æ‰€å±žã™ã‚‹çµ„ç¹”ã®å…¬å¼è¦‹è§£ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚
yassan0627 2018/01/17
#Keycloak ã®ã‚¢ãƒ‰ãƒ™ãƒ³ãƒˆã‚«ãƒ¬ãƒ³ãƒ€ãƒ¼ã‚ã£ãŸã®ã‹ãã€‚ã“ã‚Œã¯ã‚ã‚ŠãŒãŸã„ã€‚

keycloak
ãƒªãƒ³ã‚¯
GitHub - openstandia/keycloak-documentation-i18n: Translation project for keycloak-documentation
yassan0627 2017/12/03
keycloak
ãƒªãƒ³ã‚¯
Keycloak æœ€æ–°æƒ…å ± | OSSã‚µãƒãƒ¼ãƒˆã®OpenStandiaâ„¢ã€NRIã€‘
Keycloakæƒ…å ± Keycloakã¨ã¯ ä¸»ãªæ©Ÿèƒ½ ä¸»ãªç‰¹å¾´ å°Žå…¥äº‹ä¾‹ ã‚³ãƒŸãƒ¥ãƒ‹ãƒ†ã‚£æ´»å‹• å•†ç”¨è£½å“ã¨ã®æ©Ÿèƒ½æ¯”è¼ƒ ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ å‹•ä½œç’°å¢ƒ Keycloakã®ãƒ©ã‚¤ã‚»ãƒ³ã‚¹ è£½å“ãƒ€ã‚¦ãƒ³ãƒãƒ¼ãƒ‰ ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹å¹´é–“ã‚µãƒãƒ¼ãƒˆã‚µãƒ¼ãƒ“ã‚¹ Keycloakã¨ã¯ Keycloakï¼ˆã‚ãƒ¼ã‚¯ãƒãƒ¼ã‚¯ï¼‰ã¨ã¯ã€Webä¸Šã§ã®ã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ï¼ˆSSOï¼‰ï¼ˆâ€»1ï¼‰ã‚’å®Ÿç¾ã™ã‚‹ãŸã‚ã®Javaãƒ™ãƒ¼ã‚¹ã®IAM (Identity and Access Management) ã®ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã§ã€2014å¹´ã«ãƒãƒ¼ã‚¸ãƒ§ãƒ³1.0.0ãŒãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€ç«¶åˆä»–ç¤¾è£½å“ã«æ¯”è¼ƒã™ã‚‹ã¨å¾Œç™ºã®ã‚‚ã®ã¨ãªã‚Šã¾ã™ã€‚Keycloakã¯ã€Red Hat JBossãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆãŒé–‹ç™ºã‚’é€²ã‚ã¦ã„ã‚‹OSSï¼ˆã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ï¼‰ã§ã‚ã‚Šã€Apacheãƒ©ã‚¤ã‚»ãƒ³ã‚¹ã¨ã—ã¦ã‚½ãƒ¼ã‚¹ã‚³ãƒ¼ãƒ‰ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã™ã€‚Keycloakã¯ã€ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã‚„ã‚µãƒ¼ãƒ“ã‚¹ã¨ã®é€£æºã‚’ç›®çš„ã¨ã—ã¦ãŠã‚Š
yassan0627 2017/12/03
keycloak
ãƒªãƒ³ã‚¯
OSSã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“ã®ä¼šã€€ç¬¬äºŒå›žå‹‰å¼·ä¼š - è³‡æ–™ä¸€è¦§ - connpass
çµ‚äº† 2017/11/29ï¼ˆæ°´ï¼‰ 19:00ã€œ OSSã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£æŠ€è¡“ã®ä¼šã€€ç¬¬äºŒå›žå‹‰å¼·ä¼š ãã‚‰ãˆï¼ï¼ã“ã‚ŒãŒæ–°ï¼ˆãƒã‚ªï¼‰OSSèªè¨¼åŸºç›¤ã ï¼ã®å·» OMO ä»– æ±äº¬éƒ½æ¸‹è°·åŒºæµæ¯”å¯¿ï¼”ä¸ç›®ï¼‘âˆ’ï¼‘ï¼˜ æµæ¯”å¯¿ãƒã‚ªãƒŠãƒ¼ãƒˆ (3éšŽ 304, 305ä¼šè°å®¤)
yassan0627 2017/12/03
keycloak
ãƒªãƒ³ã‚¯
Introduction Â· Apiman Production Guide
yassan0627 2017/10/19
keycloak

SSO
ãƒªãƒ³ã‚¯
Keycloak ã§ SSO #æ¸‹è°·java
1. Keycloak ã§ SSO ç”°é‚Š ç¾©çœŸ(ãŸãªã¹ ã‚ˆã—ã¾ã•) @emaggame http://morec.at 2014-12-13(åœŸ) ç¬¬ä¹å›ž #æ¸‹è°·java 1 2. 2014-12-13(åœŸ) ç¬¬ä¹å›ž #æ¸‹è°·java 2 ã‚¢ã‚¸ã‚§ãƒ³ãƒ€ â— SSOã®æ‚©ã¿ â— Keycloakã¨ã¯ â— Keycloakå°Žå…¥ â— Keycloakãƒ‡ãƒ¢ â— Keycloakã®å€‹äººçš„ã«æ€ã†ã„ã„ã¨ã“ã‚ â— æœ¬æ—¥ã®ã¾ã¨ã‚ 3. 2014-12-13(åœŸ) ç¬¬ä¹å›ž #æ¸‹è°·java 3 SSOã®æ‚©ã¿ â— ä»•çµ„ã¿ä½œã‚ŠãŒé›£ã—ã„ â€“ çµ±ä¸€ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã‚’ç”¨æ„ã—ã€é–¢é€£ã™ã‚‹ã‚¢ãƒ—ãƒª ã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã™ã¹ã¦ãŒåˆ©ç”¨ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã€‚æ—¢å˜ã®ã‚¢ ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã¯ãƒ¦ãƒ¼ã‚¶æƒ…å ±ã® DB å¤‰æ›´ç™ºç”Ÿ â€“ SSLã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆè¨¼æ˜Žæ›¸ã¯ãƒ¦ãƒ¼ã‚¶ã«å°Žå…¥ã™ã‚‹æ•·å±…ãŒ é«˜ã„(ç¤¾å†…ã‚·ã‚¹ãƒ†ãƒ ã§ã‚ã‚Œã°ä¸€ç•ªæœ‰åŠ¹?) â— APã‚µãƒ¼ãƒå›ºæœ‰æ©Ÿèƒ½ã‚‚åˆ©ç”¨ã§ãã‚‹ãŒã€SSOèªè¨¼ ãŒ
yassan0627 2017/10/13
keycloak

SSO

LDAP

OpenID

SAML

èªè¨¼
ãƒªãƒ³ã‚¯
ãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹æ™‚ä»£ã®SSOã‚’å®Ÿç¾ã™ã‚‹ã€ŒKeycloakã€ã¨ã¯
æœ¬é€£è¼‰ã§ã¯ã€è¿‘å¹´æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹èªè¨¼ãƒ—ãƒãƒˆã‚³ãƒ«ã€ŒOpenID Connectã€ã‚’ã‚µãƒãƒ¼ãƒˆã™ã‚‹ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®ã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ï¼ˆSSOï¼‰ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã€ŒKeycloakã€ã®æ´»ç”¨æ–¹æ³•ã‚’è§£èª¬ã—ã¦ã„ãã¾ã™ã€‚ç¬¬1å›žç›®ã¯ã€APIã«ãŠã‘ã‚‹èªè¨¼ï¼èªå¯ã®ä»•çµ„ã¿ã¨Keycloakã®æ¦‚è¦ã‚’ç´¹ä»‹ã—ã¾ã™ã€‚ é€£è¼‰ç›®æ¬¡ APIã«ãŠã‘ã‚‹èªè¨¼ï¼èªå¯ã®ä»•çµ„ã¿ è¿‘å¹´ã€é‡‘èžã‚„æµé€šåˆ†é‡Žã§æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹ã€ŒAPIã‚¨ã‚³ãƒŽãƒŸãƒ¼ã€ã‚„ã€Œãƒžã‚¤ã‚¯ãƒã‚µãƒ¼ãƒ“ã‚¹ã‚¢ãƒ¼ã‚ãƒ†ã‚¯ãƒãƒ£ã€ãªã©ã®ç™»å ´ã«ã‚ˆã‚Šã€ã‚µãƒ¼ãƒ“ã‚¹ã®æ©Ÿèƒ½ã‚’ã€ŒREST APIã€ã¨ã—ã¦æä¾›ã™ã‚‹ã“ã¨ãŒå½“ãŸã‚Šå‰ã«ãªã£ã¦ãã¦ã„ã¾ã™ã€‚ãã—ã¦ã€REST APIã‚’å…¬é–‹ã™ã‚‹ãŸã‚ã«ã¯ã€èª°ãŒã‚¢ã‚¯ã‚»ã‚¹ã—ã¦ããŸã®ã‹ã‚’ç¢ºèªã™ã‚‹ãŸã‚ã®ã€Œèªè¨¼ï¼ˆAuthenticationï¼‰ã€ã¨ã€APIã¸ã®ã‚¢ã‚¯ã‚»ã‚¹ã‚’èª°ã«è¨±å¯ã™ã‚‹ã®ã‹ã¨ã„ã†ã€Œèªå¯ï¼ˆAuthorizationï¼‰ã€ã®ä»•çµ„ã¿ãŒä¸å¯æ¬ ã§ã™ã€‚ ã—ã‹ã—ã€è¤‡æ•°ã®ã‚µãƒ¼ãƒ“ã‚¹ãŒãã‚Œãžã‚Œå€‹åˆ¥ã«èªè¨¼ï¼è¨±å¯ã‚’
yassan0627 2017/10/13
ç¤¾å†…ADã¨é€£æºã—ãªãŒã‚‰ç‹¬è‡ªã®LDAPç’°å¢ƒã‚’æ¤œè¨Žã—ã¦ã„ã¦ã€åˆã‚ã›ã¦ã€ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡ã®ä»•çµ„ã¿ã‚‚æ¤œè¨Žã—ã¦ã„ã¦è¦‹ã¤ã‘ãŸã€‚ä¾¿åˆ©ãã†ãªã®ã§ä½¿ã£ã¦ã¿ã‚ˆã†ã‹ãªãã€‚ #keycloak

keycloak

SSO

LDAP

OpenID

SAML

èªè¨¼

ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡
ãƒªãƒ³ã‚¯
Keycloak
Single-Sign On Users authenticate with Keycloak rather than individual applications. This means that your applications don't have to deal with login forms, authenticating users, and storing users. Once logged-in to Keycloak, users don't have to login again to access a different application. This also applies to logout. Keycloak provides single-sign out, which means users only have to logout once t
yassan0627 2017/10/13
keycloak

SSO

LDAP

OpenID

SAML

èªè¨¼
ãƒªãƒ³ã‚¯
1