Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
マネーフォワードの認証基盤の現在地
Search
nhosoya
December 18, 2023
1
1.2k
マネーフォワードの認証基盤の現在地
nhosoya
December 18, 2023
Tweet
Share
More Decks by nhosoya
See All by nhosoya
マネーフォワードの認証基盤のこれまでとこれから
nhosoya
0
2.1k
Featured
See All Featured
Code Review Best Practice
trishagee
69
18k
KATA
mclloyd
30
14k
Principles of Awesome APIs and How to Build Them.
keavy
126
17k
How STYLIGHT went responsive
nonsquared
100
5.6k
The Illustrated Children's Guide to Kubernetes
chrisshort
48
50k
Exploring the Power of Turbo Streams & Action Cable | RailsConf2023
kevinliebholz
34
5.9k
Side Projects
sachag
455
42k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
morganepeng
130
19k
Git: the NoSQL Database
bkeepers
PRO
430
65k
GraphQLの誤解/rethinking-graphql
sonatard
71
11k
ReactJS: Keep Simple. Everything can be a component!
pedronauck
667
120k
The Web Performance Landscape in 2024 [PerfNow 2024]
tammyeverts
8
680
Transcript
ϚωʔϑΥϫʔυͷ ೝূج൫ͷݱࡏ גࣜձࣾϚωʔϑΥϫʔυ @nhosoya ࡉ୩थ 2023-12-19
@nhosoya ʢࡉ୩थʣ גࣜձࣾϚωʔϑΥϫʔυ IDαʔϏε։ൃ෦ ෦ 2015 - ϚωʔϑΥϫʔυMEͷ։ൃ 2018 -
ݱࡏ ೝূج൫ͷ։ൃ <- ࠓ͜ͷ
ϚωʔϑΥϫʔυͷαʔϏε
͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕
ೝূج൫ͷ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ڞ༗DBΞʔΩςΫνϟͷݶքʢ- 2017ʣ • ࿈͢ΔγεςϜো • ਐԽ͠ͳ͍ೝূ • ݴޠɺΠϯϑϥͷ੍
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ೝূج൫Λ࡞Γ࢝ΊΔʢ20181݄͝Ζʣ w 0QFO*%$POOFDUͷ࠾༻ w طଘαʔϏεͷೝূج൫ͷҠߦํ w *%BB4WTࣗ࡞ೝূج൫
OpenID Connect ͷ࠾༻ w αʔϏεೝূج൫ʹೝূΛҕৡ͢Δ͚ͩ
طଘαʔϏεͷೝূج൫ͷҠߦํ w ֤αʔϏε͕ҙͷλΠϛϯάͰೝূج൫ରԠͰ͖ΔΑ͏ʹ ڞ༗%#ͷσʔλॻ͖ࠐΈܧଓͯ͠ޓੑΛอͭ
IDaaS vs ࣗ࡞ೝূج൫ w ࣗ࡞Λબͨ͠ w ίετ w ϕϯμʔϩοΫΠϯͷճආ w
ෳࡶͳཁ݅ͷରԠͷॊೈੑ w *%ͷΤΩεύʔτͱͷ૬ஊ ʢ0QFO*%'PVOEBUJPO+BQBOͳͲʣ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ೝূج൫͕Ͱ͖ͨ͜ͱͰਐԽͨ͠ೝূ • TOTP Ͱͷ 2FA ʢ2018ʣ • Sign in with
Apple ʢ2020ʣ • Τϯϓϥ͚ SAML SSO ʢ2020ʣ • WebAuthn ରԠʢ2022ʣ/ ύεΩʔରԠʢ2023ʣ 5લ·Ͱ࣌ͰϨΨγʔͳೝূ͔͠ఏڙͰ͖͍ͯͳ͔ͬ ͨͷʹɺࠓͰ࠷৽ͷೝূΛ͍ͪૣ͘ఏڙͰ͖ΔΑ͏ʹͳͬͨ
·ͱΊ w ؒͰੵٕͬͨज़తෛ࠴ɺ·ͬͨ͘ਐԽ͠ͳ͍ೝূ w ͔͚ͯೝূج൫Λࣗ࡞ͯ͠ॳظϦϦʔε w ͔͚ͯطଘαʔϏεͷೝূॲཧΛͯ͢ೝূج൫ʹࡌͤସ͑ྃ ʢ͞ΒʹܦͬͨݱࡏͰೝূҎ֎ͷͱ͜ΖͰ%#ڞ༗͕͓ͬͯΓʹશղফ༧ఆʣ w ৫ʹ*%νʔϜཱ͕֬ͨ͠
w ೝূͷϞμϯԽɺ.645͔Β8*-- w 0QFO*%4VNNJU5PLZPʹߦ͘ͱ͍͍ͱࢥ͏
Thank you!