{"id":27856,"date":"2023-11-09T15:27:26","date_gmt":"2023-11-09T06:27:26","guid":{"rendered":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=27856"},"modified":"2023-12-01T11:40:43","modified_gmt":"2023-12-01T02:40:43","slug":"%e7%a4%be%e5%86%85%e3%81%aedesknets%e3%81%b8keycloak%e9%80%a3%e6%90%ba%e3%81%ae%e4%bb%a3%e7%90%86%e8%aa%8d%e8%a8%bc%e3%83%aa%e3%83%90%e3%83%bc%e3%82%b9%e3%83%97%e3%83%ad%e3%82%ad%e3%82%b7","status":"publish","type":"post","link":"https:\/\/www.mubit.co.jp\/pb-blog\/?p=27856","title":{"rendered":"\u793e\u5185\u306edesknet\u2019s\u3078Keycloak\u9023\u643a\u306e\u4ee3\u7406\u8a8d\u8a3c\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3092\u5b9f\u73fe"},"content":{"rendered":"

\u793e\u5185\u3067\u904b\u7528\u4e2d\u306e\u30aa\u30f3\u30d7\u30ec\u30df\u30b9\u306e ID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u8a8d\u8a3c\u306e \u30c7\u30b9\u30af\u30cd\u30c3\u30c4 \u306b\u3001\u793e\u5916\u304b\u3089 Keycloak \u3068SAML\u3084OIDC\u8a8d\u8a3c\u9023\u643a\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u7d4c\u7531\u3067\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3044\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\uff08SSO\uff1aSingle Sign On\uff09\u3067\u30a2\u30af\u30bb\u30b9\u3059\u308b\u69cb\u6210\u3067\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

Keycloak\u306f\u3001\u8907\u6570\u306e\u30a2\u30d7\u30ea\u30b1\u30fc\u30b7\u30e7\u30f3\u3084\u30b5\u30fc\u30d3\u30b9\u3078\u306e\u30ed\u30b0\u30a4\u30f3\u3092\u4e00\u5ea6\u3067\u884c\u3046\u3053\u3068\u304c\u3067\u304d\u3001\u30e6\u30fc\u30b6\u30fc\u306e\u767b\u9332\u3084\u8a8d\u8a3c\u3001\u6a29\u9650\u7ba1\u7406\u3001\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u306a\u3069\u306e\u6a5f\u80fd\u3092\u63d0\u4f9b\u3059\u308bidP \uff08 Identity Provider \uff09\u3068\u3057\u3066\u52d5\u4f5c\u3059\u308b\u30aa\u30fc\u30d7\u30f3\u30bd\u30fc\u30b9\u306e\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u3067\u3059\u3002
\n\"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

\u69cb\u6210\u306e\u30d1\u30fc\u30c4<\/p>\n\n\n\n\n
\u2460 idP<\/strong><\/td>\n\u2461 SP \/ \u4e2d\u7d99\u30b5\u30fc\u30d0\u30fc<\/strong><\/td>\n\u2462 Web\u30a2\u30d7\u30ea<\/strong><\/td>\n<\/tr>\n
Keycloak<\/td>\n\u4ee3\u7406\u8a8d\u8a3c\u6a5f\u80fd\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7<\/td>\ndesknet’s<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

desknet\u2019s\u306f\u5909\u66f4\u4e0d\u8981<\/h2>\n

\u65e2\u5b58\u3067\u904b\u7528\u4e2d\u306e desknet\u2019s \u306e\u6539\u4fee\u3084\u8a2d\u5b9a\u5909\u66f4\u306f\u4e0d\u8981\u3067\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

<\/h2>\n

 <\/p>\n

 <\/p>\n

idP \/ Keycloak \u9023\u643a\u30fbdesknet\u2019s\u3078\u4ee3\u7406\u5165\u529b\u306e\u30b7\u30f3\u30b0\u30eb\u30fb\u30b5\u30a4\u30f3\u30aa\u30f3\u69cb\u6210<\/h2>\n

Keycloak\u306a\u3069\u306eidP\u3068\u8a8d\u8a3c\u9023\u643a\u3067\u904b\u7528\u3059\u308b\u306b\u306f\u3001SAML \/ OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u3057\u305fID\u8a8d\u8b58\u578b\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3067\u3001\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3044desknet\u2019s\u3078\u306e\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\u3092\u69cb\u6210\u3057\u307e\u3059\u3002<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

* \u30d0\u30c3\u30af\u30a8\u30f3\u30c9\u306e\u300cdesknet\u2019s\u300d\u306f WAN\u3084 LAN \u306e\u4efb\u610f\u306e\u5834\u6240\u306b\u8a2d\u7f6e\u3067\u306e\u904b\u7528\u306b\u5bfe\u5fdc
\n*\u300cdesknet\u2019s\u300d\u4ee5\u5916\u306eWeb\u30a2\u30d7\u30ea\u3082SSO\u5316\u306b\u5bfe\u5fdc<\/p>\n

 <\/p>\n

\u30d1\u30b9\u30ef\u30fc\u30c9\u7ba1\u7406<\/h2>\n

SAML \/ OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u304c\u4ee3\u7406\u8a8d\u8a3c\u3092\u884c\u3046\u305f\u3081\u3001<\/p>\n

    \n
  1. \u5229\u7528\u8005\u304b\u3089 desknet\u2019s \u3078\u306e\u300cID \/ \u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u306e\u5165\u529b\u4e0d\u8981<\/li>\n
  2. \u5229\u7528\u8005\u304b\u3089\u300cID\/\u30d1\u30b9\u30ef\u30fc\u30c9\u300d\u6f0f\u6d29\u30ea\u30b9\u30af\u3092\u4f4e\u6e1b<\/li>\n<\/ol>\n\n\n\n
    \"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

    *\u00a0 SP\u6a5f\u80fd\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3068\u4ee3\u7406\u5165\u529b\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\u3092\u5206\u96e2\u3057\u3066\u591a\u6bb5\u69cb\u6210\u306e\u904b\u7528\u306b\u3082\u5bfe\u5fdc<\/p>\n

     <\/p>\n

    <\/h3>\n

     <\/p>\n

    SSO\u3067\u5229\u7528\u3059\u308b\u6a5f\u5668<\/h2>\n

    \"\"<\/a><\/p>\n

     <\/p>\n

     <\/p>\n

      \n
    1. idP<\/li>\n
    2. SAML \/ OIDC\u8a8d\u8a3c\u306b\u5bfe\u5fdc\u306e\u30ea\u30d0\u30fc\u30b9\u30d7\u30ed\u30ad\u30b7\uff08 \u30e6\u30fc\u30b6\u30fc\u60c5\u5831\u306e\u4ee3\u7406\u5165\u529b\u6a5f\u80fd \uff09<\/li>\n
    3. desknet\u2019s\uff08\u6539\u4fee\u4e0d\u8981\uff09<\/li>\n
    4. \u30d6\u30e9\u30a6\u30b6\uff08 \u30d7\u30e9\u30b0\u30a4\u30f3\u4e0d\u8981 \uff09<\/li>\n<\/ol>\n\n\n\n
      \"\"<\/a><\/td>\n<\/td>\n\"\"<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

       <\/p>\n

       <\/p>\n

      \u00a0\u5bfe\u5fdc\u306eidP<\/h2>\n

      Keycloak\u3092\u5229\u7528\u3067\u304d\u307e\u3059\u3002<\/p>\n

      \u307e\u305fKeycloak\u4ee5\u5916\u306b\u3082\u3001SAML \/ OIDC\u8a8d\u8a3c\u3092\u30b5\u30dd\u30fc\u30c8\u306e idP \u306b\u5bfe\u5fdc\u3057\u3066\u3044\u307e\u3059<\/p>\n