{"id":27298,"date":"2023-11-01T18:51:26","date_gmt":"2023-11-01T09:51:26","guid":{"rendered":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=27298"},"modified":"2024-04-11T11:42:13","modified_gmt":"2024-04-11T02:42:13","slug":"%e6%97%a2%e5%ad%98web%e3%82%92%e6%94%b9%e4%bf%ae%e4%b8%8d%e8%a6%81%e3%81%a7keycloak%e3%81%a8saml%e3%82%84oidc%e8%aa%8d%e8%a8%bc%e3%81%ae%e3%82%b7%e3%83%b3%e3%82%b0%e3%83%ab%e3%82%b5%e3%82%a4%e3%83%b3","status":"publish","type":"post","link":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=27298","title":{"rendered":"\u65e2\u5b58Web\u3092\u6539\u4fee\u4e0d\u8981\u3067Keycloak\u3068SAML\u3084OIDC\u8a8d\u8a3c\u306e\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3092\u5b9f\u73fe\u3059\u308b\u65b9\u6cd5 \/ \u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c0\u30d7\u30bf\u30fc\u3084\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306e\u6bd4\u8f03"},"content":{"rendered":"

\uff5e\u3000Keycloak\u3068SSO\u9023\u643a\u3067\u304d\u308b\u4ee3\u7406\u8a8d\u8a3c\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u5229\u7528\u3000\uff5e<\/strong><\/span><\/p>\n

Keycloak\u3092\u5229\u7528\u3057\u305f\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u306f\u3001\u5229\u7528\u8005\u304c\u8907\u6570\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u969b\u306b\u3001\u4e00\u5ea6\u306e\u8a8d\u8a3c\u3067\u6e08\u3080\u3088\u3046\u306b\u3059\u308b\u4ed5\u7d44\u307f\u3067\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

\u305f\u3060\u3057\u3001\u3059\u3079\u3066\u306eWeb\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u304cSAML\u3084OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u308b\u308f\u3051\u3067\u306f\u3042\u308a\u307e\u305b\u3093\u3002\u5f93\u6765\u304b\u3089\u904b\u7528\u306e\u30ec\u30ac\u30b7\u30fcWeb\u30a2\u30d7\u30ea\u306f\u3001SAML\u3084OIDC\u8a8d\u8a3c\u306a\u3069\u306eSSO\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u306a\u3044\u30b1\u30fc\u30b9\u304c\u307b\u3068\u3093\u3069\u3067\u3059\u3002<\/p>\n

<\/h2>\n

 <\/p>\n

Web\u306eSSO\u5316<\/h2>\n

Keycloak\u3067SAML\u3084OIDC\u8a8d\u8a3c\u306b\u672a\u5bfe\u5fdc\u306e\u65e2\u5b58Web\u3092\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u306b\u5bfe\u5fdc\u3055\u305b\u308b\u5834\u5408\u306b\u306f<\/p>\n\n\n\n\n\n
SSO\u3078\u306e\u5bfe\u5fdc\u65b9\u6cd5<\/strong><\/td>\nWeb\u306e\u6539\u4fee<\/strong><\/td>\n\u5099\u8003
\n<\/strong><\/td>\n<\/tr>\n
\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c0\u30d7\u30bf\u30fc\u3000*1<\/td>\n\u5fc5\u8981<\/td>\n\u30b5\u30fc\u30c9\u30d1\u30fc\u30c6\u30a3\u306eWeb\u30a2\u30d7\u30ea\u306b\u306f\u9069\u7528\u3057\u306b\u304f\u3044<\/td>\n<\/tr>\n
\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7<\/td>\n\u4e0d\u8981<\/td>\n\u5f93\u6765\u306e\u8a8d\u8a3c\u65b9\u5f0f\u3068\u306e\u4f75\u7528\u3067\u306e\u904b\u7528\u304c\u53ef\u80fd<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u306a\u3069\u306e\u65b9\u6cd5\u304c\u3042\u308a\u307e\u3059\u3002<\/p>\n

\u65b0\u898f\u3067Web\u3092\u4f5c\u6210\u3059\u308b\u5834\u5408\u306b\u306f\u3001Keycloak\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c0\u30d7\u30bf\u30fc\u306e\u9078\u629e\u679d\u3082\u5bb9\u6613\u3067\u3059\u3002\u65e2\u5b58\u3067\u904b\u7528\u306eWeb\u3078\u306eSSO\u5316\u306b\u306f\u3001Web\u306e\u6539\u4fee\u304c\u5fc5\u8981\u3068\u306a\u308b\u305f\u3081\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c0\u30d7\u30bf\u30fc\u306e\u5c0e\u5165\u306f\u6577\u5c45\u304c\u9ad8\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n

*1\u3000Keycloak\u306e\u30d0\u30fc\u30b8\u30e7\u30f3\u306b\u3088\u308a\u3001\u5229\u7528\u3067\u304d\u308b\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30c0\u30d7\u30bf\u30fc\u304c\u7570\u306a\u308a\u307e\u3059<\/p>\n

 <\/p>\n

\u65e2\u5b58Web\u306f\u6539\u4fee\u4e0d\u8981\u3067SSO<\/h2>\n

\"\"<\/a><\/p>\n

\u65e2\u5b58\u306eWeb\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u6539\u4fee\u3059\u308b\u3053\u3068\u306a\u304f\u3001Keycloak\u9023\u643a\u306e\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3092\u69cb\u6210\u3059\u308b\u624b\u6cd5\u3068\u3057\u3066\u3001SAML\u3084OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u306e<\/p>\n

\u300c\u4ee3\u7406\u8a8d\u8a3c\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u300d<\/p>\n

\u3092\u6d3b\u7528\u3057\u305fSSO\u5316\u304c\u6709\u52b9\u3067\u3059\u3002<\/p>\n

 <\/p>\n

\u4ee3\u7406\u8a8d\u8a3c\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7<\/h2>\n

SAML\u3084OIDC\u8a8d\u8a3c\u5bfe\u5fdc\u306e\u4ee3\u7406\u5165\u529b\u6a5f\u80fd\u3092\u6301\u3064\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306f\u3001Web\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306e\u524d\u306b\u914d\u7f6e\u3055\u308c\u305f\u4e2d\u7d99\u30b5\u30fc\u30d0\u30fc\u3067\u3059\u3002<\/p>\n

\u30e6\u30fc\u30b6\u30fc\u304c\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u3001Keycloak \/ idP\u304c\u30e6\u30fc\u30b6\u30fc\u306e\u8a8d\u8a3c\u3092\u884c\u3044\u3001\u8a8d\u8a3c\u306b\u6210\u529f\u3059\u308b\u3068\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304cWeb\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u306b\u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u3092\u4ee3\u7406\u5165\u529b\u3057\u307e\u3059\u3002<\/p>\n

\u3053\u308c\u306b\u3088\u308a\u3001Web\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3092\u6539\u4fee\u3059\u308b\u3053\u3068\u306a\u304f\u3001SSO\u306b\u5bfe\u5fdc\u3055\u305b\u308b\u3053\u3068\u304c\u53ef\u80fd\u3067\u3059\u3002<\/p>\n\n\n\n
\"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u30dd\u30a4\u30f3\u30c8<\/h4>\n
    \n
  1. \u30e6\u30fc\u30b6\u30fc\u306f\u3001Web\u30a2\u30d7\u30ea\u306e \u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d \u306e\u5165\u529b\u4e0d\u8981<\/li>\n
  2. \u30e6\u30fc\u30b6\u30fc\u306b\u306f\u3001Web\u30a2\u30d7\u30ea\u306e\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u306e\u516c\u958b\u306f\u4e0d\u8981<\/li>\n
  3. \u65e2\u5b58\u3067\u904b\u7528\u306eWeb\u30a2\u30d7\u30ea\u3092\u6539\u4fee\u3092\u3059\u308b\u3053\u3068\u306a\u304f\u3001SSO\u3092\u5b9f\u73fe<\/li>\n<\/ol>\n

     <\/p>\n

    Keycloak<\/strong>\u9023\u643a\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304b\u3089Web<\/strong>\u3078<\/strong>\u4ee3\u7406\u8a8d\u8a3c\u3067\u306eSSO<\/strong><\/h2>\n

    Keycloak \/ idP \u3068 \u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u306fSAML\u3084OIDC\u3067\u8a8d\u8a3c\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n

    \"\"<\/a><\/p>\n

    \u300cWeb\u30b7\u30b9\u30c6\u30e0\u300d\u306f WAN \/ DMZ \/ LAN \u306e\u4efb\u610f\u306e\u5834\u6240\u306e\u8a2d\u7f6e\u306b\u5bfe\u5fdc\u3057\u3066\u3044\u307e\u3059<\/p>\n

     <\/p>\n

    SSO\u306b\u5fc5\u8981\u306a\u6a5f\u5668<\/h2>\n
      \n
    1. idP \/ Keycloak<\/li>\n
    2. SAML \/ OIDC\u8a8d\u8a3c\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\uff08 \u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u306e\u4ee3\u7406\u5165\u529b\u6a5f\u80fd \uff09<\/li>\n
    3. \u65e2\u5b58\u306eWeb\uff08 \u5909\u66f4\u4e0d\u8981 \/ \u30a8\u30fc\u30b8\u30a7\u30f3\u30c8\u4e0d\u8981 \uff09<\/li>\n
    4. \u30d6\u30e9\u30a6\u30b6\uff08 \u30d7\u30e9\u30b0\u30a4\u30f3\u4e0d\u8981 \uff09<\/li>\n<\/ol>\n

      \"\"<\/a><\/p>\n

       <\/p>\n

       <\/p>\n

       <\/p>\n

      idP \/ Keycloak<\/h2>\n