{"id":22778,"date":"2023-07-25T17:41:57","date_gmt":"2023-07-25T08:41:57","guid":{"rendered":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=22778"},"modified":"2023-12-05T11:34:52","modified_gmt":"2023-12-05T02:34:52","slug":"keycloak%e3%81%a7%e4%bb%a3%e7%90%86%e8%aa%8d%e8%a8%bc%e3%82%92%e8%a1%8c%e3%81%84%e3%82%b7%e3%83%b3%e3%82%b0%e3%83%ab%e3%82%b5%e3%82%a4%e3%83%b3%e3%82%aa%e3%83%b3%e3%82%92%e5%ae%9f%e7%8f%be%e3%81%99","status":"publish","type":"post","link":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=22778","title":{"rendered":"Keycloak\u3067\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3044\u65e2\u5b58Web\u3078\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\uff08SSO\uff09\u3092\u5b9f\u73fe\u3059\u308b\u65b9\u6cd5 \/ \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306e\u5229\u7528\u3067Web\u306e\u6539\u4fee\u4e0d\u8981"},"content":{"rendered":"

Keycloak\u306f\u3001\u8907\u6570\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3084\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u30ed\u30b0\u30a4\u30f3\u3092\u4e00\u5ea6\u3067\u884c\u3046\u3001\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\uff08SSO;Single Sign On) \u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308b\u70ba\u306b\u3001Red Hat\u793e\u304c\u958b\u767a\u3057\u305fJava\u30d9\u30fc\u30b9\u306e\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u30bd\u30d5\u30c8\u30a6\u30a8\u30a2\u3067\u3059\u3002<\/p>\n

SAML\u3084OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u306eWeb\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u5834\u5408\u306b\u306f\u3001\u7c21\u5358\u306bKeycloak\u3068SSO\u306e\u69cb\u6210\u3092\u7d44\u3080\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n\n\n\n
\"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u305f\u3060\u3057\u3001\u3059\u3079\u3066\u306eWeb\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304cSSO\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u5f93\u6765\u304b\u3089\u904b\u7528\u306eWeb\u30a2\u30d7\u30ea\u306f\u3001SSO\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u306a\u3044\u3053\u3068\u304c\u307b\u3068\u3093\u3069\u3067\u3059\u3002<\/p>\n

 <\/p>\n

\u305d\u306e\u5834\u5408\u3001\u65e2\u5b58Web\u306eSSO\u5316\u3078\u306e\u5bfe\u5fdc\u65b9\u6cd5\u306f2\u901a\u308a\u3042\u308a\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n\n\n\n\n\n
\u65e2\u5b58Web\u306eSSO\u5316<\/strong><\/td>\n\u5bfe\u5fdc\u7b56<\/strong><\/td>\n<\/tr>\n
Web\u306e\u6539\u4fee\u3067\u5bfe\u5fdc<\/td>\nWeb\u3092SAML \/ OIDC \u8a8d\u8a3c\u3078\u5bfe\u5fdc\u3055\u305b\u308b\u6539\u4fee\u3092\u884c\u3046\u00a0 *1<\/td>\n<\/tr>\n
Web\u306f\u672a\u6539\u4fee\u3067\u5bfe\u5fdc<\/td>\nSAML \/ OIDC\u8a8d\u8a3c\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u7d4c\u7531\u306e\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3046<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

*1 \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c0\u30d7\u30bf\u30fc\u306a\u3069\u3092Web\u5074\u306b\u7d44\u307f\u8fbc\u3080\u6539\u4fee\u304c\u5fc5\u8981\u3067\u3059<\/p>\n

 <\/p>\n

\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067SSO<\/h2>\n

\u65e2\u5b58\u306e\u300cSAML \/ OIDC\u8a8d\u8a3c\u306b\u672a\u5bfe\u5fdc\u306eWeb\u30a2\u30d7\u30ea\u300d\u3092 Keycloak\u3068\u9023\u643a\u3057\u3066\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3067\u904b\u7528\u3059\u308b\u5834\u5408\u306b\u306f\u3001\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u5229\u7528\u3059\u308b\u3053\u3068\u3067\u300c\u65e2\u5b58Web\u306e\u6539\u4fee\u4e0d\u8981\u300d\u3067SSO\u306b\u5bfe\u5fdc\u3055\u305b\u308b\u65b9\u6cd5\u3092\u3068\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

Keycloak\u3067\u4ee3\u7406\u8a8d\u8a3c\u3092\u5b9f\u73fe\u3059\u308b\u306b\u306f\u3001Keycloak\u3068SAML\u3084OIDC\u8a8d\u8a3c\u3067\u9023\u643a\u3059\u308bID\u8a8d\u8b58\u578b\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u7d4c\u7531\u3057\u3066\u3001\u65e2\u5b58\u306eWeb\u30b7\u30b9\u30c6\u30e0\u3078 \u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d \u306a\u3069\u306e\u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u3092\u4ee3\u7406\u5165\u529b&\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3044SSO\u3092\u69cb\u6210\u3057\u307e\u3059\u3002<\/p>\n

 <\/p>\n

\u5171\u6709\u30a2\u30ab\u30a6\u30f3\u30c8\u3067SSO<\/h2>\n

\u307e\u305f\u3001\u8907\u6570\u306e\u30e6\u30fc\u30b6\u30fc\u3067\u540c\u4e00\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u5229\u7528\u3059\u308b \u300c\u5171\u6709\u30a2\u30ab\u30a6\u30f3\u30c8\u300d \u3067Web\u30a2\u30af\u30bb\u30b9\u3059\u308b\u969b\u306e\u8a8d\u8a3c\u306b\u3064\u3044\u3066\u3082\u3001\u4ee3\u7406\u8a8d\u8a3c\u3092\u5229\u7528\u3057\u3066\u306eSSO\u5bfe\u5fdc\u304c\u53ef\u80fd\u3067\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

\u4ee3\u7406\u8a8d\u8a3c\u3067\u306e\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3<\/h2>\n\n\n\n\n
\"\"<\/a>\"\"<\/a><\/td>\n<\/tr>\n
SAML \/ OIDC\u8a8d\u8a3c\u306b\u672a\u5bfe\u5fdc\u306eWeb<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

\u793e\u5185\u306eSAML \/ OIDC\u8a8d\u8a3c\u306b\u672a\u5bfe\u5fdc\u306e\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u8a8d\u8a3c\u300d\u306eWeb\u30b5\u30fc\u30d0\u30fc\u3078\u3001Keycloak \/ idP \u9023\u643a\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3044SSO\u3067\u30a2\u30af\u30bb\u30b9\u3055\u305b\u307e\u3059\u3002<\/p>\n

 <\/p>\n

\u4ee3\u7406\u8a8d\u8a3c<\/h2>\n

SAML\/OIDC\u8a8d\u8a3c\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304b\u3089Web\u3078\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u3092\u4ee3\u7406\u5165\u529b\uff06\u4ee3\u7406\u8a8d\u8a3c<\/p>\n

    \n
  1. \u30e6\u30fc\u30b6\u30fc\u64cd\u4f5c\u3067\u306eWeb\u3078\u306e\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u306e\u5165\u529b\u4e0d\u8981<\/li>\n
  2. SAML \/ OIDC\u8a8d\u8a3c\u306b\u672a\u5bfe\u5fdc\u306eWeb\u3092SSO\u306e\u30e1\u30f3\u30d0\u30fc\u3068\u3057\u3066\u69cb\u6210<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    \u00a0<\/span><\/p>\n

     <\/p>\n

    Keycloak\u9023\u643a\u306e\u4ee3\u7406\u8a8d\u8a3c\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u7d4c\u7531\u3067Web\u3078<\/strong>SSO<\/strong><\/h2>\n

    SAML\u8a8d\u8a3c\u3084OIDC\u8a8d\u8a3c\u306b\u300c\u672a\u5bfe\u5fdc\u306eWeb\u300d\u3084\u300c\u30ec\u30ac\u30b7\u30fc\u306aWeb\u300d\u3092<\/p>\n

      \n
    1. \u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u306e\u30e1\u30f3\u30d0\u30fc\u3068\u3057\u3066\u69cb\u6210<\/li>\n
    2. \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u300cWeb\u30b7\u30b9\u30c6\u30e0\u300d\u306f \u6539\u4fee\u4e0d\u8981\u00a0 *1<\/li>\n
    3. \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u300cWeb\u30b7\u30b9\u30c6\u30e0\u300d\u306f LAN \/ WAN \/ DMZ\u00a0 \u306e\u4efb\u610f\u306e\u5834\u6240\u306b\u8a2d\u7f6e<\/li>\n<\/ol>\n

      \u3067\u904b\u7528\u3067\u304d\u307e\u3059<\/p>\n

      \"\"<\/a><\/p>\n

      *1\u00a0 \u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306eWeb\u30a2\u30d7\u30ea\u3084\u30b5\u30fc\u30d3\u30b9\u3082\u6539\u4fee\u4e0d\u8981\u3067SSO\u306b\u5bfe\u5fdc\u3067\u304d\u307e\u3059<\/span><\/p>\n

       <\/p>\n

      SSO\u3067\u306e\u5fc5\u8981\u306a\u6a5f\u5668\u69cb\u6210<\/h2>\n

      \"\"<\/a><\/p>\n

       <\/p>\n

       <\/p>\n

        \n
      1. idP \/ Keycloak<\/li>\n
      2. SAML \/ OIDC\u8a8d\u8a3c\u6a5f\u80fd\u306e\u4ee3\u7406\u8a8d\u8a3c\u5bfe\u5fdc\u306e \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\uff08 \u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u306e\u4ee3\u7406\u5165\u529b\u6a5f\u80fd \uff09<\/li>\n
      3. \u65e2\u5b58Web \uff08 Web\u306e\u6539\u4fee\u4e0d\u8981 \/ \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u4e0d\u8981 \uff09<\/li>\n
      4. \u30d6\u30e9\u30a6\u30b6\uff08 \u30d7\u30e9\u30b0\u30a4\u30f3\u4e0d\u8981 \uff09
        \n        \"\"<\/a><\/li>\n<\/ol>\n

         <\/p>\n

        <\/h3>\n

         <\/p>\n

         <\/p>\n

        \u00a0idP \/ Keycloak<\/h2>\n

        \"\"<\/a><\/p>\n

         <\/p>\n