FrontPage - SAML Wiki
NOTE: This wiki is provided by the OASIS standards consortium as a collaborative tool for members of the OASIS Security Services Technical Committee, who are permitted to post to these pages. As this is an official workspace of the TC, the OASIS IPR Policy and other OASIS rules apply to its use. To learn more about the work of the TC, send a comment, or join this effort, visit the OASIS Security S
SAMLèªè¨¼ãŒã§ãã‚‹ã¾ã§ - Cybozu Inside Out | サイボウズエンジニアã®ãƒ–ãƒã‚°
ã“ã‚“ã«ã¡ã¯ã€Slashãƒãƒ¼ãƒ ã®æ¸¡è¾ºã§ã™ã€‚ Slashãƒãƒ¼ãƒ ã§ã¯ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ç®¡ç†ã‚„èªè¨¼å‘¨ã‚Šãªã©ã®ã€cybozu.comã®å„サービスã«å…±é€šã™ã‚‹æ©Ÿèƒ½ã‚’開発ã—ã¦ã„ã¾ã™ã€‚今回ã¯ã€3月ã«ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸã€SAMLèªè¨¼ã‚’用ã„ãŸã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³æ©Ÿèƒ½1ã«ã¤ã„ã¦ãŠè©±ã•ã›ã¦é ‚ãã¾ã™ã€‚cybozu.comã§ã®SAMLèªè¨¼ã®æ¦‚è¦ã«ãã‚ãˆã¦ã€ãれらã®æ©Ÿèƒ½ã‚’ã©ã®ã‚ˆã†ã«è¨è¨ˆãƒ»å®Ÿè£…ã—ã¦ã„ã£ãŸã‹ã€ã¨ã„ã†èª°ã‚‚興味ãªã„ニッãƒãªè©±é¡Œã‚’扱ã„ã¾ã™ã€‚ SAML2 ã£ã¦ï¼Ÿ 「SAMLãªã‚“ã¦èžã„ãŸã“ã¨ç„¡ã„ã‘ã©ãªã‚“ã¨ãªã興味ãŒã‚ã‚‹ãžï¼ï¼ã€ã¨ã„ã†ç‰©å¥½ããªæ–¹ã®ãŸã‚ã«ã€SAMLã®æ¦‚è¦ã¨cybozu.comã§ã®åˆ©ç”¨ã«ã¤ã„ã¦ã€ç°¡å˜ã«èª¬æ˜Žã—ã¾ã™ã€‚ãã‚“ãªã‚‚ã®ã¯æ—¢ã«çŸ¥ã£ã¦ã„ã‚‹ã¨ã„ã†SAML猛者ãªæ–¹ã¯èªã¿é£›ã°ã—ã¦é ‚ã„ã¦æ§‹ã„ã¾ã›ã‚“。 SAMLã¯Security Assertion Markup Languageã®ç•¥ã§ã€OASIS3ã«ã‚ˆã£ã¦ç–定ã•ã‚ŒãŸã€ç•°ãªã‚‹ã‚»ã‚ュリ
SAML Introduction | SAML XML.org
Wiki page: Submitted by trscavo on Tue, 2008-07-01 14:16. Last updated on Tue, 2008-07-01 17:50. SAML V2.0 Official SAML V2.0 documents produced by the OASIS Security Services Technical Committee: Executive Overview Technical Overview SAML FAQ Trust Models Guidelines Presentations SAML V2.0 Basics (OpenDocument format with animations) (Eve Maler, Sun) SAML 2.0: Federation Models, Use-Cases and Sta
アイデンティティ管ç†ã«ãŠã‘る「レベルåˆã‚ã›ã€ï¼ˆ1/3ï¼‰ï¼ ï¼ IT
第4回 アイデンティティ管ç†ã«ãŠã‘る「レベルåˆã‚ã›ã€ 連æºã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ç®¡ç†ã‚’実ç¾ã™ã‚‹ã«ã¯ã€ã€Œãã®èªè¨¼ã¯æœ¬å½“ã«ãã¡ã‚“ã¨è¡Œã‚ã‚Œã¦ã„ã‚‹ã‹ã€ã¨ã„ã£ãŸæ¡ä»¶ã‚’満ãŸã—ã€ä¿¡é ¼é–¢ä¿‚ã‚’çµã¶ã“ã¨ãŒå¿…è¦ã«ãªã‚Šã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ æ—¥æœ¬é›»ä¿¡é›»è©±æ ªå¼ä¼šç¤¾ NTTæƒ…å ±æµé€šãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ç ”ç©¶æ‰€ 伊藤 å®æ¨¹ 2011/4/11 ã“ã‚Œã¾ã§ã€ç¬¬1回「『アイデンティティ管ç†ã€ã®å‘¨è¾ºäº‹æƒ…ã‚’æ•´ç†ã—よã†ã€ã§ã¯ä¸»è¦ãªã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³æ–¹å¼ã«ã¤ã„ã¦ã€ç¬¬3回「OpenIDï¼SAMLã®ã¤ãªãŽæ–¹ã¨ãã®èª²é¡Œã€ã§ã¯ã€Kantara Initiative Concordia Discussion Group（Concordia DG）ã«ã¦è¡Œã‚ã‚Œã¦ã„ãŸOpenIDã¨SAMLã¨ã®ç›¸äº’連æºãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã—ãŸã€‚ 今回ã‹ã‚‰2回ã«ã‚ãŸã‚Šã€ã€Œã‚µãƒ¼ãƒé–“ã§ã®ä¿¡é ¼æ§‹ç¯‰ã€ã®ææ–™ã®1ã¤ã¨ãªã‚‹ã€ŒIdentity Assuranceã€ï¼ˆã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ã®ä¿è¨¼ï¼‰ã®è€ƒ
OpenIDã¨SAMLã®ã¤ãªãŽæ–¹ã¨ãã®èª²é¡Œï¼ ï¼ IT
第3回 OpenIDï¼SAMLã®ã¤ãªãŽæ–¹ã¨ãã®èª²é¡Œ æ—¥æœ¬é›»ä¿¡é›»è©±æ ªå¼ä¼šç¤¾ NTTæƒ…å ±æµé€šãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ç ”ç©¶æ‰€ 伊藤 å®æ¨¹ 2010/1/22 “The Venn of Identityâ€ã‹ã‚‰ã‚¹ã‚¿ãƒ¼ãƒˆã—ãŸã€ID管ç†æ–¹å¼ã®ç›¸äº’é‹ç”¨æ–¹å¼ã®æ¨¡ç´¢ã€‚第3回ã§ã¯å…·ä½“çš„ãªæ–¹å¼ã‚’解説ã—ã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ 第2回「ID管ç†æŠ€è¡“ã‚’ã¤ãªã女神ã€ã‚³ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ã‚¢ã€ã§ã¯ã€ID管ç†æ–¹å¼ã®ã€Œç›¸äº’é‹ç”¨ã€ã¨ã„ã†è€ƒãˆæ–¹ã«ã¤ã„ã¦è§£èª¬ã—ã¾ã—ãŸã€‚今回ã¯å‰å›žã®å†…容をè¸ã¾ãˆã€OpenIDã¨SAMLを例ã«å…·ä½“çš„ãªç›¸äº’接続ã®æ–¹å¼ã¨ãã®èª²é¡Œã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ OpenIDã¨SAMLã‚’ã¤ãªã ãã‚Œã§ã¯ã€OpenIDã¨SAMLã¨ã®ç›¸äº’接続ã«ã‚ãŸã£ã¦æ¤œè¨Žã•ã‚ŒãŸãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã‚’見ã¦ã„ãã¾ã—ょã†ã€‚ OpenIDã€SAMLã¯ã„ãšã‚Œã‚‚ã€ã‚µãƒ¼ãƒ“ス間ã§èªè¨¼çµæžœã‚’共有ã™ã‚‹æ–¹å¼ã§ã€ç›¸äº’連æºãŒå¿…è¦ã¨ã•ã‚Œã‚‹ãƒ¦ãƒ¼ã‚¹ã‚±ãƒ¼ã‚¹ã‚‚「プãƒã‚シモデルã€ã«åŸºã¥ã„ã¦ã„ã¾ã™ã€‚2種類ã®èªè¨¼é€£æº
ID管ç†æŠ€è¡“ã‚’ã¤ãªã女神ã€ã‚³ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ã‚¢ ï¼ ï¼ IT
第2回 ID管ç†æŠ€è¡“ã‚’ã¤ãªã女神ã€ã‚³ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ã‚¢ æ—¥æœ¬é›»ä¿¡é›»è©±æ ªå¼ä¼šç¤¾ NTTæƒ…å ±æµé€šãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ç ”ç©¶æ‰€ 伊藤 å®æ¨¹ 2009/12/22 ID管ç†æŠ€è¡“ã®ç›¸äº’é‹ç”¨æ€§ç¢ºä¿ã®ãŸã‚ã«ç™ºè¶³ã—ãŸçµ„ç¹”ã€ã€Œã‚³ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ã‚¢ã€ã€‚ãã®å‡ºç™ºç‚¹ã¯ã€1ã¤ã®ã€Œãƒ™ãƒ³å›³ã€ã§ã—ãŸï¼ˆç·¨é›†éƒ¨ï¼‰ 第1回「アイデンティティ管ç†ã®å‘¨è¾ºäº‹æƒ…ã‚’æ•´ç†ã—よã†ã€ã§ã¯ã€Webサーãƒä¸Šã®è¤‡æ•°ã‚µãƒ¼ãƒ“スをæŸãã‚‹ã€ã€Œé€£æºID管ç†ã€ã®ç¾çŠ¶ã«ã¤ã„ã¦èª¬æ˜Žã—ã¦ãã¾ã—ãŸã€‚今回ã¯å‰å›žèª¬æ˜Žã—ãŸè¤‡æ•°ã®ID管ç†æŠ€è¡“é–“ã®ç›¸äº’é‹ç”¨æ–¹å¼ã«ã¤ã„ã¦ã€ç¾åœ¨æ¤œè¨Žã‚’進ã‚ã¦ã„ã‚‹ã€ã‚³ãƒ³ã‚³ãƒ¼ãƒ‡ã‚£ã‚¢ï¼ˆã‚«ãƒ³ã‚¿ãƒ¼ãƒ©ãƒ»ã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ– コンコーディア・ディスカッショングループ）ã¨ãã®å–り組ã¿å†…容ã«ã¤ã„ã¦èª¬æ˜Žã—ã¾ã™ã€‚ コンコーディアã¨ã‚«ãƒ³ã‚¿ãƒ¼ãƒ©ãƒ»ã‚¤ãƒ‹ã‚·ã‚¢ãƒ†ã‚£ãƒ– コンコーディアã¯ID管ç†æŠ€è¡“ã®ç›¸äº’é‹ç”¨æ€§ç¢ºä¿ã«å¿…è¦ãªæŠ€è¡“æ–¹å¼ã€ç›¸äº’é‹ç”¨ãƒãƒªã‚·ãƒ¼ãªã©ã‚’検討ã€æ案ã™ã‚‹ã‚ªãƒ¼ãƒ—ンコミュニティ「コンコーディア・プãƒ
「アイデンティティ管ç†ã€ã®å‘¨è¾ºäº‹æƒ…ã‚’æ•´ç†ã—ã‚ˆã† ï¼ ï¼ IT
第1回 「アイデンティティ管ç†ã€ã®å‘¨è¾ºäº‹æƒ…ã‚’æ•´ç†ã—ã‚ˆã† æ—¥æœ¬é›»ä¿¡é›»è©±æ ªå¼ä¼šç¤¾ NTTæƒ…å ±æµé€šãƒ—ãƒ©ãƒƒãƒˆãƒ•ã‚©ãƒ¼ãƒ ç ”ç©¶æ‰€ 伊藤 å®æ¨¹ 2009/11/5 OpenIDã«SAMLã€Liberty Allianceã«Information Card ……。ã“ã“ã§ã‚‚ã†ä¸€åº¦ã€ã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ç®¡ç†ã‚’イãƒã‹ã‚‰å¦ã‚“ã§ã¿ã¾ã›ã‚“ã‹ã€‚ID管ç†ã®å‘¨è¾ºæƒ…å ±ã‚’ã¾ã¨ã‚ã€æ–°ã—ã„教科書ã¨ã—ã¦ä½¿ãˆã‚‹é€£è¼‰ã‚’スタートã—ã¾ã™ï¼ˆç·¨é›†éƒ¨ï¼‰ ID管ç†ã£ã¦ä½•ã ã£ãŸã£ã‘？ 昨今ã®OpenIDã®å°é ã‚„ã€ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã«ã‚ˆã‚‹ Windows CardSpaceã®æœ¬æ ¼å±•é–‹ã‚’契機ã¨ã—ã¦ã€ã€Œã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ï¼ˆSingle Sign-On）ã€ã‚„「連æºã‚¢ã‚¤ãƒ‡ãƒ³ãƒ†ã‚£ãƒ†ã‚£ç®¡ç†ï¼ˆé€£æºID管ç†ï¼‰ã€ã¨ã„ã£ãŸå˜èªžãŒã‚ˆã†ã‚„ãæ—¥ã®ç›®ã‚’見るよã†ã«ãªã£ã¦ãã¾ã—ãŸã€‚ã¾ãŸã€ã„ã¾ã‚ã‚‹ID管ç†æŠ€è¡“ã‚’ã©ã†ä½¿ã„分ã‘ã‚‹ã‹ã€ã‚ã‚‹ã„ã¯ç•°ãªã‚‹ID管ç†æŠ€è¡“åŒå£«ã®ç›¸äº’é‹ç”¨ã¯å¯èƒ½ãªã®ã‹ã¨ã„ã£ãŸè°è«–ãŒã¾
強力ãªSSOを実ç¾ã™ã‚‹XMLèªè¨¼ãƒ»èªå¯ã‚µãƒ¼ãƒ“ス（SAML）
「第1回 Webサービスã®ã‚»ã‚ュリティ概è¦ã€ã§ã¯Webサービス・セã‚ュリティã®ãƒ•ãƒ¬ãƒ¼ãƒ ワークã«ã¤ã„ã¦ã€ã€Œç¬¬2回 XMLデジタル署åã¨XMLæš—å·ã€ã§ã¯XMLç½²åã¨XMLæš—å·ã«ã¤ã„ã¦è¿°ã¹ãŸã€‚「第3回 XMLéµç®¡ç†ã‚µãƒ¼ãƒ“スã¨XMLプãƒãƒˆã‚³ãƒ«ã€ã¯éµæƒ…å ±ã®ç™»éŒ²ã¨æ¤œè¨¼ã‚’外部ã®ã‚µãƒ¼ãƒ“スã«ä¾é ¼ã™ã‚‹ä»•çµ„ã¿ã§ã‚ã‚‹XKMSã¨ã€ã“れらã®æƒ…å ±ã‚’ä¼é”ã™ã‚‹ãŸã‚ã®XMLプãƒãƒˆã‚³ãƒ«SOAPã«ã¤ã„ã¦è¿°ã¹ãŸã€‚ 今回ã¯ã‚·ãƒ³ã‚°ãƒ«ã‚µã‚¤ãƒ³ã‚ªãƒ³ï¼ˆSSO）やã€ãã‚Œã«ç¶šã„ã¦å±žæ€§æƒ…å ±ã‚„ã‚¢ã‚¯ã‚»ã‚¹åˆ¶å¾¡æƒ…å ±ã‚’ä¼é”ã™ã‚‹ãƒ—ãƒãƒˆã‚³ãƒ«SAML（Security Assertion Markup Language）ã«ã¤ã„ã¦è¿°ã¹ã‚‹ã€‚SAMLã¯é€£æºã—ãŸä¼æ¥é–“ã®Webサービスã®SSOを目指ã—ã¦æœ€è¿‘ç–定ã•ã‚ŒãŸLiberty Allianceã®ä»•æ§˜ã‚„ã€ãƒžã‚¤ã‚¯ãƒã‚½ãƒ•ãƒˆã®.NET Passportã«ç”¨ã„られる基本的ãªæŠ€è¡“ã¨ã—ã¦æ³¨ç›®ã•ã‚Œã¦ã„ã‚‹ã‚‚ã®ã§ã‚る。ã•ã‚‰ã«SAMLã®ä¸Šã§
SAMLã«ã¤ã„ã¦è‡ªç”±å‹æ‰‹ã«ç´¹ä»‹ - snippets from shinichitomita’s journal
宿題をid:ZIGOROuã•ã‚“ã‹ã‚‰èª²ã›ã‚‰ã‚ŒãŸã®ã§ã€æ—©ã‚ã«ã‚„ã£ã¤ã‘ã§ç‰‡ä»˜ã‘ã¾ã™ã€‚ã§ã‚‚入門ã€ã¨ã„ã†ã®ã¨ã¯ã¡ã‚‡ã£ã¨ã¡ãŒã†ã ã‚ã†ãªã€‚今回ã¯ã€SAMLを知ã£ã¦ã„る人ã«ã¯å½“ãŸã‚Šå‰ã®è©±ã§ã‚‚ã€çŸ¥ã‚‰ãªã„人ã¯ãã£ã¨ã‚ã‹ã‚‰ãªã„ã ã‚ã†ã“ã¨ã‚’補足ã™ã‚‹ã ã‘ã§ã™ã€‚ã—ã‹ã‚‚ã¨ã¿ãŸã®ä¸»è¦³çš„ã«ãŠã‚‚ã—ã‚ã„ã¨æ€ã£ã¦ã‚‹ã¨ã“ã‚ã ã‘。 ãã‚‚ãも僕自身ã®èƒ½åŠ›çš„ãªè©±ã§ã€Libertyã®æ™‚代も仕様ã¯æ°—ã«ãªã£ãŸã¨ã“ã‚ã—ã‹èªã‚“ã§ãªã„ã®ã§ã€ç¶²ç¾…çš„ã«æ›¸ãã®ã¯æ£ç›´ã¤ã‚‰ã„ã—ã€å‰²ã«åˆã‚ãªã„ã¨æ„Ÿã˜ã¦ã¾ã™ã€‚ãŸã ã€ä»Šå›žã¯ãã£ã¨tkudoã•ã‚“ãŒæ·»å‰Šã—ã¦ãれるã¯ãšãªã®ã§ã€ã‹ãªã‚Šã®ã³ã®ã³ã¨æ›¸ã„ã¡ã‚ƒã„ã¾ã™ã€‚ æ´å²ã®ãŠã•ã‚‰ã„ ã¾ãšé–“é•ãˆæ˜“ã„点ã¨ã—ã¦ã€SAML1.0ã¨ã‹1.1ã£ã¦ã®ã¯ã€SAMLãŒå‡ºãŸã¦ã®ã¨ãã®ä»•æ§˜ãªã®ã§ã€ã„ã¾ã®è©±(v2.0)ã¨çµæ§‹é•ã†ã€‚çµæ§‹SAMLã§æ¤œç´¢ã™ã‚‹ã¨ã“ã®ã“ã‚ã®è©±ãŒå¼•ã£ã‹ã‹ã£ãŸã‚Šã™ã‚‹ã€‚ã‚€ã—ã‚今ã®SAML 2.0を調ã¹ã‚ˆã†ã¨ã—ãŸã‚‰Liberty ID-
SAML Specifications | SAML XML.org
Wiki page: Submitted by carolgeyer on Mon, 2007-10-22 20:16. Last updated on Tue, 2013-05-28 16:09. SAML V2.0 SAML version 2.0 was approved as an OASIS Standard in March 2005. The complete SAML 2.0 OASIS Standard set (PDF format) and schema files are available in this zip file. Approved Errata for SAML V2.0 was last produced by the SSTC on 1 May 2012. In addition to the normative errata document,
OpenIdP
Welcome to Feide OpenIdP The Feide OpenIdp is for users that do not have an account in Feide. The use of the OpenIdP is now restricted to Sikt and it's services. Register a new account Register a new account Managing your account Review registered user information Reset lost password Change password Support If you encounter problems with Feide OpenIdP you should first contact the service provider
SimpleSAMLphp Home - SimpleSAMLphp
SimpleSAMLphp is an application written in native PHP that deals with authentication. The main focus of SimpleSAMLphp is providing support for: SAML 2.0 as a Service Provider (SP) SAML 2.0 as an Identity Provider (IdP) However, it also supports many other identity protocols and frameworks, such as CAS, OpenID Connect, WS-Federation and OAuth, and is easily extendable, so you can develop your own m
1
ãŠçŸ¥ã‚‰ã›
障害
ランã‚ング
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
https://blogs.oracle.com/tkudo/entry/fedlet_implementation_available_in_opensso
OASIS Security Services TC
http://xmlconsortium.org/websv/kaisetsu/C10/main.html
OpenAM/OpenSSO æŠ€è¡“æƒ…å ± - Open Source Solution Technology Corporation
Java æš—å·åŒ–拡張機能 JDK5.0
SimpleSAMLphp Identity Provider QuickStart
SimpleSAMLphp Service Provider QuickStart
SimpleSAMLphp Documentation
{{#tags}}- {{label}}
{{/tags}}