On-behalf-of Token exchange with AgentCore Identity

ҏլ༟ల 0OCFIBMGPG5PLFOFYDIBOHF XJUI"HFOU$PSF*EFOUJUZ +"846("*.-ɿ "*ΤʔδΣϯτͱ"*%-$ͰՃ଎͢Δʂ"*.-࣮ફ-5େձ

ࣗݾ঺հ ҏլ༟ల גࣜձࣾΤΫα΢Οβʔζ 4PGUXBSF&OHJOFFS ޷͖ͳαʔϏε"NB[PO#FESPDL"HFOU$PSF Y Y Y

ຊ೔ͷΰʔϧ 0OCFIBMGPG5PLFO&YDIBOHF ҎԼ0#0 ʹؔͯ͠ҎԼͷख͕͔ΓΛಘΔ͜ͱ w ͳͥ"*ΤʔδΣϯτʹ0#0͕ඞཁͳͷ͔ w "HFOU$PSF*EFOUJUZͷ0#0͕ԿΛղܾ͢Δͷ͔ w ઃܭ࣌ʹؾΛ͚ͭΔ΂͖ϙΠϯτ

"*"HFOUͷՁ஋͸֎෦γεςϜ࿈ܞͰੜ·ΕΔ "*"HFOU͸ݴޠϞσϧ୯ମͰ͸ͳ͘ɺ֎෦γεςϜͱͷ࿈ܞͰΑΓՁ஋͕ੜ· Ε·͢ɻ w ඞཁͳ৘ใΛࣾ಺"1*΍%#͔Βऔಘ͢Δ w ֎෦γεςϜͱ࿈ܞͯ͠ɺۀ຿ίϯςΩετΛཧղ͢Δ w ֎෦γεςϜΛૢ࡞ͯ͠ɺϢʔβʔͷ୅ΘΓʹλεΫΛ࣮ߦ͢Δ

Ϣʔβʔͷ୅ΘΓʹ࣮ߦ͢Δʹ͸ɺೝՄઃܭ͕ඞཁ "*"HFOU͕֎෦"1*ΛݺͿͱ͖͸ɺ ୭ͷݖݶͰɺԿΛɺͲ͜·Ͱ࣮ߦͰ͖Δͷ͔Λ໌֬ʹ͢Δඞཁ͕͋Γ·͢ɻ w ୭ͷݖݶͰʁϢʔβʔݖݶ͔ɺ"HFOUݖݶ͔ w ୭ͷૢ࡞ͱͯ͠ʁ؂ࠪϩά্ͷ࣮ߦओମ͸୭͔ w Ͳ͜·ͰڐՄ͢Δʁείʔϓ͸ߜΕ͍ͯΔ͔

"HFOU$PSF*EFOUJUZ "*ΤʔδΣϯτ͕"84Ϧιʔε΍֎෦αʔϏεʹ҆શʹΞΫηε͢ΔͨΊͷೝ ূɾೝՄͱτʔΫϯ؅ཧΛ୲౰͢Δ"HFOU$PSFͷϚωʔδυαʔϏε IUUQTVTFBTUDPOTPMFBXTBNB[PODPNCFESPDLBHFOUDPSFJEFOUJUZ

"HFOU$PSF*EFOUJUZͷ0VUCPVOE0"VUI w .. Ϣʔβʔʹґଘ͠ͳ͍γεςϜؒ࿈ܞ޲͚ w "VUIPSJ[BUJPO$PEF(SBOU 4BB4ͷϢʔβʔσʔλࢀরɾߋ৽޲͚ w 0#0 Ϣʔβʔͱ"HFOUͷจ຺Λอͬͨ୅ཧ࣮ߦ޲͚

0#0͕௥Ճ͞Εͨ IUUQTBXTBNB[PODPNKQBCPVUBXTXIBUTOFXBNB[POCFESPDLBHFOUDPSF

0OCFIBMGPGUPLFOFYDIBOHFͱ͸ ೝূࡁΈϢʔβʔͷUPLFOΛɺԼྲྀ޲͚ͷUPLFOʹ࡞Γ௚͢࢓૊Έ */16550,&/ TVCKFDU6TFS BVEJFODF"HFOU TDPQFCSPBE 06516550,&/ TVCKFDU6TFS BDUPS"HFOU BVEJFODF%PXO4USFBN
TDPQFOBSSPX 0#05PLFO&YDIBOHF

ͳͥ0#0͕ඞཁ͔ʁ

ѱ͍ྫɿ5PLFO1BTTUISPVHI ಉ͡5PLFOΛ࢖༻͠ଓ͚Δ 6TFS "HFOU .$14FSWFS "1* 6TFS5PLFO 4BNF5PLFO 4BNF5PLFO

5PLFO1BTTUISPVHIͰى͖Δ໰୊ w "ա৒ݖݶ w #؂ࠪੑͷ௿Լ w $"VEJFODFͷෆҰக

"ա৒ݖݶ ϢʔβʔUPLFOʹؚ·ΕΔTDPQFΛͦͷ··"HFOU͕ར༻Ͱ͖ͯ͠·͏ w "HFOUͷॲཧʹෆཁͳTDPQF·Ͱ࢖͑ͯ͠·͏ w "HFOU΍5PPMͷෆ۩߹࣌ʹɺӨڹൣғ͕޿͕Γ΍͍͢ fi MFSFBE fi
MFXSJUF NBJMSFBE DBMFOEBSSFBE DBMFOEBSSFBE NBJMSFBE TDPQFDBMFOEBSSFBE

"ա৒ݖݶ0#0ʹΑΔղܾ 0#0ʹΑͬͯɺඞཁ࠷খݶͷTDPQFʹߜͬͨUPLFOʹަ׵͢Δ #&'03& fi MFSFBE fi MFXSJUF NBJMSFBE DBMFOEBSSFBE "'5&3
DBMFOEBSSFBE

#؂ࠪੑͷ௿Լ 5PLFO1BTTUISPVHIͰ͸ɺૢ࡞ͷ࣮ߦओମ͕ᐆດʹͳΓ΍͍͢ w Ϣʔβʔຊਓͷૢ࡞͔ɺ"HFOUͷ୅ཧ࣮ߦ͔෼͔Βͳ͍ w Ͳͷ"HFOU5PPM͕࣮ߦͨ͠ͷ͔௥੻͠ʹ͍͘ w Πϯγσϯτ࣌ͷݪҼௐࠪɾ੹೚ڥքͷ֬ೝ͕೉͘͠ͳΔ

#؂ࠪੑͷ௿Լ0#0ʹΑΔղܾ 0#0Ͱ͸ɺަ׵ޙͷUPLFOʹBDUPSͷ৘ใΛؚΊΔ͜ͱͰɺ ୅ཧ࣮ߦͷจ຺Λදݱ͢Δ w TVCKFDUϢʔβʔݖݶͷ࣋ͪओɾґཔݩΛද͢ w BDUPS"HFOU࣮ࡍʹ"1*Λݺͼग़࣮͢ߦओମΛද͢ w ʮ୭ͷґཔͰɺͲͷ"HFOU͕࣮ߦ͔ͨ͠ʯΛ௥੻͠΍͘͢͢Δ *TTVFE5PLFO
\ lBDUz\ lTVCzlBHFOUz ^ ^

$"VEJFODFͷෆҰக 5PLFO1BTTUISPVHIͰ͸ɺ"HFOU޲͚UPLFO͕ͦͷ··֎෦"1*ʹ౉͞ΕΔ w ֎෦"1*޲͚Ͱ͸ͳ͍UPLFO͕࢖ΘΕΔ w "1*ݺͼग़͠ʹࣦഊ͢ΔBVEJFODFΛݕূ͢Δͱڋ൱͞ΕΔ w ݕূ͕؁͍ͱޡ༻͞ΕΔຊདྷड͚ೖΕΔ΂͖Ͱͳ͍UPLFO͕࢖ΘΕΔ

$"VEJFODFͷෆҰக0#0ʹΑΔղܾ 0#0Ͱ͸ɺݺͼग़͠ઌ"1*ʹదͨ͠UPLFOʹަ׵͢Δ w BVEJFODFΛ"1*ʹ߹ΘͤΔ w ֎෦"1*͕ظ଴͢ΔUPLFOΛ࢖͏ */16550,&/ BVEJFODF"HFOU 06516550,&/ BVEJFODF4FSWJDF"
⭕4FSWJDF" ❌4FSWJDF# ❌4FSWJDF$

0#0Ͱ5PLFO1BTTUISPVHIͷ໰୊Λղܾ w "ա৒ݖݶ w ඞཁͳTDPQFͷΈʹ੍ݶ͢Δ w #؂ࠪੑͷ௿Լ w ୭ͷґཔͰͲͷ"HFOU͕࣮ߦͨ͠ͷ͔ͷ৘ใΛؚΊΔ w
$"VEJFODFͷෆҰக w ݺͼग़͠ઌ"1*޲͚ͷBVEJFODFΛ࣋ͭUPLFOʹަ׵͢Δ

0#0ʹؔ࿈ͨͭ͠ͷ࢓༷

0#0ʹؔ࿈ͨͭ͠ͷ࢓༷ 0OCFIBMGPGUPLFOFYDIBOHFʹؔ࿈ͨͭ͠ͷ࢓༷͕͋Γ·͢ w 3'$5PLFO&YDIBOHF w 3'$+85#FBSFS(SBOU

3'$5PLFO&YDIBOHF w JOCPVOEUPLFOΛTVCKFDU@UPLFOͱͯ͠౉͢ w ඞཁʹԠͯ͡BDUPS@UPLFOͰ"HFOUΛද͢ w +85ͳΒBDUDMBJNͰ୅ཧ࣮ߦΛදݱͰ͖Δ *OCPVOE5PLFO 4VCKFDU5PLFO "DUPS5PLFO
*TTVFE5PLFO *TTVFE5PLFO \ lBDUz\ lTVCzlBHFOUz ^ ^

3'$+85#FBSFS(SBOU w +85BTTFSUJPOΛUPLFOFOEQPJOUʹఏࣔ͢Δ w ೝՄαʔόʔ͕JTTVFSॺ໊BVEJFODFΛݕূ͢Δ w ݕূʹ੒ޭ͢ΔͱBDDFTTUPLFO͕ൃߦ͞ΕΔ

"HFOU$PSF*EFOUJUZʹ͓͚Δ 0OCFIBMGPGUPLFOFYDIBOHF

$SFEFOUJBM1SPWJEFSͰઃఆՄೳ w .BOBHFE$POTPMFͰ͸ɺ "HFOU$PSF*EFOUJUZ0VUCPVOE"VUI"EE0"VUI$MJFOU $VTUPN1SPWJEFS"EEJUJPOBM$PO fi HVSBUJPO͔ΒઃఆՄೳ

"HFOU$PSF*EFOUJUZ0#0ͷ࢓૊Έ w 0"VUI$SFEFOUJBM1SPWJEFSʹ0#0ઃఆΛ࣋ͭ w "HFOU$PSF*EFOUJUZ͕UPLFOFYDIBOHFΛ஥հ w *E1"VUIPSJ[BUJPO4FSWFS͕࠷ऴ࣮ߦ w BHFOU͸UPLFOऔಘ"1*ΛݺͿ͚ͩ

"HFOU$PSF*EFOUJUZ0#0ͷ࢓૊Έ 3VOUJNF͔ΒEPXOTUSFBNUPLFOΛऔಘ͢ΔྲྀΕ w (FU3FTPVSDF0BVUI5PLFOΛ0#0ͰݺͿ w PBVUI'MPXʹ0/@#&)"-'@0'@50,&/@&9$)"/(&Λઃఆ w "HFOU$PSF*EFOUJUZ͕EPXOTUSFBNUPLFOΛฦ͢

"HFOU$PSF*EFOUJUZ0#0ͷ࢓૊Έ

"HFOU$PSF*EFOUJUZ0#0ͷ஫ҙ఺ w "HFOU$PSF*EFOUJUZ0#0͸5PLFO&YDIBOHFࣗମ͸୲Θͳ͍ ͭ·Γɺ*E1͕0#0Λαϙʔτ͍ͯ͠Δඞཁ͕͋Δ w *E1ʹΑͬͯɺ0#0Λαϙʔτ͍ͯ͠Δ͔ɺαϙʔτ͍ͯ͠Δ৔߹ʹɺ Ͳͷ3'$Λαϙʔτ͍ͯ͠Δ͔͕ҟͳΔద੾ͳࢦఆ͕ඞཁ w 3'$ɿ50,&/@&9$)"/(& w
3'$ɿ+85@"65)03*;"5*0/@(3"/5 w ˞$PHOJUPͰ͸0#0͸αϙʔτ͞Ε͍ͯͳ͍ʜ

3'$ͰͷBDUPS5PLFO$POUFOU "DUPSΛͲ͏දݱ͢Δ͔Λઃܭ͢Δ w ..0"VUIDMJFOUJEFOUJUZΛBDUPSʹ͢Δ w "84@*".@*%@50,&/@+85"84XPSLMPBEJEFOUJUZΛBDUPSʹ͢Δ w /0/&BDUPSͷະࢦఆ

BDUPS5PLFO$POUFOU/0/&ͷ஫ҙ఺ "HFOUʹΑΔʮ୅ཧ࣮ߦʯͰ͋Δ͜ͱ͕Θ͔ΒͣʮͳΓ͢·͠ʯͱͳΔ w جຊతʹ͸JTTVFEUPLFOʹBDUؚ͕·Εͳ͍ w JTTVFEUPLFO͸VTFS୯ಠͷUPLFOʹݟ͑Δ w Ͳͷ"HFOU͕࣮ߦ͔ͨ͠ΛೝՄɾ؂ࠪͰ͖ͳ͍

*EFOUJUZ0#0͕ͳ͍৔߹ͷ3VOUJNF࣮૷ "HFOUDPEF͕0"VUIDMJFOUʹͳΔ w JOCPVOEUPLFOΛQSPQBHBUF͠ɺDPEF͔ΒࢀরՄೳʹ͢Δ w BHFOUDPEFͰ*E1UPLFOFOEQPJOUΛݺͿ w EPXOTUSFBNUPLFOΛ"1*ݺͼग़͠ʹ෇༩

*EFOUJUZ0#0͕ͳ͍৔߹ͷ(BUFXBZ࣮૷ 3FRVFTU*OUFSDFQUPS͕0"VUIDMJFOUʹͳΔ w (BUFXBZͷ*OCPVOEUPLFOΛQBTTUISPVHI͢Δ w 3&26&45JOUFSDFQUPSͰUPLFOΛऔಘ w JOUFSDFQUPS಺ͰUPLFOFYDIBOHFΛ࣮ߦ w PVUCPVOE"VUIPSJ[BUJPOIFBEFSΛࠩ͠ସ͑Δ

"HFOU$PSF*EFOUJUZ0#0ͷϝϦοτ 0"VUI࣮૷Λ*EFOUJUZͷQMBUGPSNMBZFSʹू໿Ͱ͖Δ w 3VOUJNF(BUFXBZ3FRVFTU*OUFSDFQUPS͔ΒTFDSFU؅ཧΛআ͘ w 3'$*E1ͷ಺༰ΛઃఆԽͰ͖Δ w ෳ਺"HFOUෳ਺5BSHFUͰ࠶ར༻͠΍͍͢ w "HFOU$PSF*EFOUJUZͷ4FDVSFͳ࢓૊Έʹ৐Δ͜ͱ͕Ͱ͖Δ

"HFOU$PSF*EFOUJUZ0#0ͷݶք *E1ͷ୅ΘΓʹ0#05PLFO&YDIBOHFΛ࣮ߦ͢ΔΘ͚Ͱ͸ͳ͍ w *E1ଆͷ0#0UPLFOFYDIBOHFରԠ͕ඞཁ w ൃߦDMBJN΍QPMJDZ͸*E1ʹґଘ ͕ͨͬͯ͠ɺ*E1ͷ࢓༷Λ͔ͬ͠Γͱ೺Ѳ͢Δ͜ͱ͕ॏཁ

·ͱΊ w 0OCFIBMGPGUPLFOFYDIBOHFͰUPLFOQBTTUISPVHIͷ໰୊ΛղܾͰ͖Δ w ա৒ݖݶɺ؂ࠪੑͷ௿Լɺ"VEJFODFͷෆҰக w "HFOU$PSF*EFOUJUZͰ0#0ͷઃఆ͕Մೳ w 5PLFO&YDIBOHFͷ੹຿Λ"HFOU$PSF*EFOUJUZʹू໿Ͱ͖Δ w
઀ଓઌͷ*E1͕0#0Λαϙʔτ͍ͯ͠Δඞཁ͕͋Δ఺ʹ஫ҙ

5IBOLZPV

On-behalf-of Token exchange with AgentCore Iden...

On-behalf-of Token exchange with AgentCore Identity

More Decks by iganin

Other Decks in Technology

Featured

Transcript