{"id":13257,"date":"2021-07-02T11:43:41","date_gmt":"2021-07-02T02:43:41","guid":{"rendered":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=13257"},"modified":"2023-07-07T14:55:44","modified_gmt":"2023-07-07T05:55:44","slug":"%e7%a4%be%e5%86%85%e3%81%ae%e3%82%b5%e3%82%a4%e3%83%9c%e3%82%a6%e3%82%ba%e3%81%b8idaas-azure-ad%e3%81%aesaml%e8%aa%8d%e8%a8%bc%e7%b5%8c%e7%94%b1%e3%81%ae%e3%83%aa%e3%83%90%e3%83%bc%e3%82%b9%e3%83%97","status":"publish","type":"post","link":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=13257","title":{"rendered":"\u793e\u5185\u306e\u30b5\u30a4\u30dc\u30a6\u30ba\u3078iDaaS\/Azure AD\u306eSAML\u3084OIDC\u8a8d\u8a3c\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067SSO \/ \u30b5\u30a4\u30dc\u30a6\u30ba\u306e\u6539\u4fee\u4e0d\u8981"},"content":{"rendered":"

\u30ea\u30e2\u30fc\u30c8\u30ef\u30fc\u30af\u6642\u306b\u30aa\u30f3\u30d7\u30ec\u306e\u30b5\u30a4\u30dc\u30a6\u30ba\u3078\u306e\u30a2\u30af\u30bb\u30b9\u306b\u969b\u3057\u3066\u3001SAML\u3084OIDC\u8a8d\u8a3c\u5bfe\u5fdc\u306e \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u5229\u7528\u3057\u3066iDaaS\u306eidP\/Azure AD \u8a8d\u8a3c\u9023\u643a\u3067\u30a2\u30af\u30bb\u30b9\u3055\u305b\u308b\u904b\u7528\u6642\u306e\u8a2d\u5b9a\u4f8b\u3067\u3059\u3002\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067\u4ee3\u7406\u8a8d\u8a3c\u306b\u3088\u308a\u30b5\u30a4\u30dc\u30a6\u30ba\u3078\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3067\u30a2\u30af\u30bb\u30b9\u3059\u308b\u69cb\u6210\u3067\u3059\u3002\u65e2\u5b58\u3067\u904b\u7528\u306e\u30b5\u30a4\u30dc\u30a6\u30ba\u5074\u306e\u5909\u66f4\u306f\u4e0d\u8981\u3067\u3059\u3002<\/p>\n

 <\/p>\n

\"https:\/\/www.mubit.co.jp\/pb-blog\/wp-content\/uploads\/2015\/02\/cybozu-proxy-11.png\"<\/p>\n

<\/h1>\n

<\/h1>\n

 <\/p>\n

\u8a2d\u7f6e\u3084\u69cb\u6210<\/h1>\n

\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u5148\u306e\u30bf\u30fc\u30b2\u30c3\u30c8\u306e\u30b5\u30a4\u30dc\u30a6\u30ba\u306f\u3001LAN \/ WAN \/ DMZ\u306a\u3069\u4efb\u610f\u306e\u5834\u6240\u306b\u8a2d\u7f6e\u3067\u306e\u904b\u7528\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

<\/h1>\n

 <\/p>\n

\u30d1\u30b9\u30ef\u30fc\u30c9\u4ee3\u7406\u5165\u529b\uff06\u4ee3\u7406\u8a8d\u8a3c<\/h1>\n

SAML \/ OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304c\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3046\u305f\u3081\u3001<\/p>\n

    \n
  1. \u5229\u7528\u8005\u5074\u3067\u30b5\u30a4\u30dc\u30a6\u30ba\u3078\u306e\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u306e\u5165\u529b\u4e0d\u8981\u304a\u3088\u3073\u7ba1\u7406\u4e0d\u8981<\/li>\n
  2. \u904b\u7528\u4e2d\u306e\u30b5\u30a4\u30dc\u30a6\u30ba\u306f\u6539\u4fee\u4e0d\u8981<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

     <\/p>\n

    VPN\u3068\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7<\/h1>\n

    \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067\u306e\u30a2\u30af\u30bb\u30b9\u306f\u3001VPN\u306e\u3088\u3046\u306a\u9ad8\u8ca0\u8377\u304c\u304b\u304b\u3089\u306a\u3044\u305f\u3081\u306b\u30a2\u30af\u30bb\u30b9\u306e\u96c6\u4e2d\u306b\u969b\u3057\u3066\u3082\u95be\u5024\u304c\u9ad8\u304f\u3001\u5b89\u5b9a\u7684\u306a\u904b\u7528\u304c\u51fa\u6765\u307e\u3059\u3002<\/p>\n

     <\/p>\n

    \"\"<\/p>\n

    \"\"<\/a><\/p>\n

     <\/p>\n

     <\/p>\n

     <\/p>\n

     <\/p>\n

     <\/p>\n

     <\/p>\n

      \n
    1. \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306eWeb\u3092\u96a0\u853d\uff08\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u4e0a\u306e\u30e1\u30ea\u30c3\u30c8\uff09<\/li>\n
    2. \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306eWeb\u306eOS\u306b\u4f9d\u5b58\u305b\u305a\u306b\u5c0e\u5165\u3067\u304d\u308b<\/li>\n
    3. \u30d6\u30e9\u30a6\u30b6\u306e\u307f\u3067\u5229\u7528\u3067\u304d\u308b\uff08VPN\u306e\u3088\u3046\u306a\u5c02\u7528\u30bd\u30d5\u30c8\u306f\u4e0d\u8981\uff09<\/li>\n<\/ol>\n

       <\/p>\n

       <\/p>\n

      \u5229\u7528\u3059\u308b\u6a5f\u5668<\/h1>\n
        \n
      1. Azure AD \/ idP<\/li>\n
      2. SAML \/ OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\uff08 \u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u306e\u4ee3\u7406\u5165\u529b\u6a5f\u80fd \uff09<\/li>\n
      3. \u30b5\u30a4\u30dc\u30a6\u30ba<\/li>\n
      4. \u30d6\u30e9\u30a6\u30b6\uff08 \u30d7\u30e9\u30b0\u30a4\u30f3\u4e0d\u8981 \uff09<\/li>\n<\/ol>\n

        <\/h1>\n

         <\/p>\n

        Azure AD \/ idP\u00a0 \u9023\u643a
        \n<\/strong><\/h1>\n

        Azure AD \u306eSAML \u3082\u3057\u304f\u306f OIDC\u8a8d\u8a3c\u3067\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3068\u9023\u643a\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
        \"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/p>\n

        \"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

         <\/p>\n

         <\/p>\n

        SAML\/OIDC\u8a8d\u8a3c\u6a5f\u80fd\u306eSSO\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7<\/strong><\/h1>\n

        \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306f\u3001SAML \/ OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u306eSSO\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u30fb\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9<\/p>\n

        \"\"<\/a>\u300cPowered BLUE ReverseProxy for SSO \/ IDaaS<\/a>\u300d<\/p>\n

        \u3067\u69cb\u7bc9\u904b\u7528\u3057\u307e\u3059\u3002<\/p>\n

        \"\"<\/a><\/p>\n

         <\/p>\n

         <\/p>\n

         <\/p>\n

        <\/h1>\n

        <\/h1>\n

         <\/p>\n

         <\/p>\n

        \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u30fb\u30a2\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u6a5f\u80fd<\/strong><\/h1>\n