{"id":21502,"date":"2023-06-26T12:20:51","date_gmt":"2023-06-26T03:20:51","guid":{"rendered":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=21502"},"modified":"2023-09-21T11:58:10","modified_gmt":"2023-09-21T02:58:10","slug":"openstack%e5%af%be%e5%bf%9c-azure-ad%e9%80%a3%e6%90%basaml%e8%aa%8d%e8%a8%bc%e3%81%ae%e3%83%aa%e3%83%90%e3%83%bc%e3%82%b9%e3%83%97%e3%83%ad%e3%82%ad%e3%82%b7%e3%81%a7%e6%97%a2%e5%ad%98web%e3%81%b8sso","status":"publish","type":"post","link":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=21502","title":{"rendered":"OpenStack\u5bfe\u5fdc Azure AD\u9023\u643aSAML\u8a8d\u8a3c\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067\u65e2\u5b58Web\u3078\u4ee3\u7406\u8a8d\u8a3c\u3067SSO \/ FUJITSU Hybrid IT Service FJcloud-O\u3067\u904b\u7528"},"content":{"rendered":"

\u5bcc\u58eb\u901a\u304c\u904b\u7528\u3059\u308bOpenStack\u306e\u30af\u30e9\u30a6\u30c9\u57fa\u76e4 FUJITSU Hybrid IT Service FJcloud-O<\/a> \u4e0a\u306bSAML\u8a8d\u8a3c\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u69cb\u7bc9\u3057\u307e\u3059\u3002IDaaS\/idP\u306eMicrosoft Entra ID\uff08\u65e7\u540d\u79f0 Azure AD\uff09\u3092\u5229\u7528\u3057\u3066\u3001\u793e\u5185\u8a2d\u7f6e\u306e\u30ec\u30ac\u30b7\u30fc\u306aWeb\u30b5\u30fc\u30d0\u30fc\u306bSAML\u3084OIDC\u5bfe\u5fdc\u306e\u6a5f\u80fd\u3092\u6301\u3064Reverse Proxy\u7d4c\u7531\u3067\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3044\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3067\u904b\u7528\u3057\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

\u3010<\/strong>\u30ec\u30ac\u30b7\u30fcWeb<\/strong>\u3011<\/strong><\/h2>\n

SAML\u8a8d\u8a3c\u3084OIDC\u8a8d\u8a3c\uff08Open ID Connect\uff09\u306b\u672a\u5bfe\u5fdc\u306e\u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306eWeb\u3078\u3001\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304b\u3089 \u30e6\u30fc\u30b6\u30fc\u60c5\u5831 \u3092\u4ee3\u7406\u5165\u529b\u3057\u3066\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3092\u69cb\u6210\u3057\u307e\u3059\u3002<\/p>\n\n\n\n\n
\"\"<\/a>\"\"<\/a><\/td>\n<\/tr>\n
SAML \/ OIDC\u8a8d\u8a3c\u306b
\n\u672a\u5bfe\u5fdc\u306eWeb<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

 <\/p>\n

\u3010\u4ee3\u7406\u8a8d\u8a3c\u3011<\/h2>\n

\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304c\u4ee3\u7406\u5165\u529b\u304a\u3088\u3073\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3046\u305f\u3081<\/p>\n

    \n
  1. \u5229\u7528\u8005\u304b\u3089Web\u3078\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u306e\u5165\u529b\u4e0d\u8981<\/li>\n
  2. \u5229\u7528\u8005\u3078\u306eWeb\u306e\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u306e\u516c\u958b\u4e0d\u8981<\/li>\n
  3. SAML\u3084OIDC\u306b\u672a\u5bfe\u5fdc\u306eWeb\u3092SSO\u306e\u30e1\u30f3\u30d0\u30fc\u3068\u3057\u3066\u69cb\u6210<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

     <\/p>\n

    <\/h3>\n

     <\/p>\n

    \u3010Azure AD\u9023\u643a\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304b\u3089\u65e2\u5b58Web\u3078<\/strong>\u4ee3\u7406\u5165\u529b\uff06SSO<\/strong>\u3011<\/h2>\n
      \n
    1. SAML \/ OIDC\u8a8d\u8a3c\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306f\u3001FUJITSU Hybrid IT Service FJcloud-O<\/a> \u4e0a\u3067\u904b\u7528<\/li>\n
    2. \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u300cWeb\u300d\u306f WAN\u3084LAN \u306e\u4efb\u610f\u306e\u5834\u6240\u306b\u8a2d\u7f6e\u304c\u53ef\u80fd<\/li>\n<\/ol>\n

      \"\"<\/a><\/p>\n

       <\/p>\n

       <\/p>\n

      \u3010 \u5fc5\u8981\u306a\u6a5f\u5668\u306a\u3069 \u3011<\/h2>\n
        \n
      1. idP<\/li>\n
      2. SAML \/ OIDC\u8a8d\u8a3c\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\uff08 \u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u306e\u4ee3\u7406\u5165\u529b\u6a5f\u80fd \uff09<\/li>\n
      3. \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306eWeb\uff08\u6539\u4fee\u4e0d\u8981\uff09<\/li>\n
      4. \u30d6\u30e9\u30a6\u30b6\uff08\u30d7\u30e9\u30b0\u30a4\u30f3\u4e0d\u8981\uff09<\/li>\n<\/ol>\n\n\n\n
        \"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

         <\/p>\n

         <\/p>\n

        \u3010 idP \/ Azure AD \u3011<\/h2>\n

        idP\u3068\u3057\u3066\u306f\u3001Microsoft Entra ID\uff08\u65e7\u540d\u79f0\u00a0 Azure AD\uff09\u306e\u4ed6\u306b<\/p>\n

        SAML \/ OIDC\u8a8d\u8a3c\u3092\u30b5\u30dd\u30fc\u30c8\u306e \u4e00\u822c\u7684\u306aidP \u306b\u5bfe\u5fdc<\/p>\n