Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
マネーフォワードの認証基盤の現在地
Search
nhosoya
December 18, 2023
1
1.3k
マネーフォワードの認証基盤の現在地
nhosoya
December 18, 2023
Tweet
Share
More Decks by nhosoya
See All by nhosoya
マネーフォワードの認証基盤のこれまでとこれから
nhosoya
0
2.2k
Featured
See All Featured
個人開発の失敗を避けるイケてる考え方 / tips for indie hackers
panda_program
113
20k
Fantastic passwords and where to find them - at NoRuKo
philnash
52
3.4k
The Straight Up "How To Draw Better" Workshop
denniskardys
236
140k
Making Projects Easy
brettharned
117
6.4k
How GitHub (no longer) Works
holman
315
140k
The Illustrated Children's Guide to Kubernetes
chrisshort
48
50k
Done Done
chrislema
185
16k
Let's Do A Bunch of Simple Stuff to Make Websites Faster
chriscoyier
507
140k
Measuring & Analyzing Core Web Vitals
bluesmoon
9
590
GraphQLの誤解/rethinking-graphql
sonatard
72
11k
Raft: Consensus for Rubyists
vanstee
140
7.1k
The Myth of the Modular Monolith - Day 2 Keynote - Rails World 2024
eileencodes
26
3k
Transcript
ϚωʔϑΥϫʔυͷ ೝূج൫ͷݱࡏ גࣜձࣾϚωʔϑΥϫʔυ @nhosoya ࡉ୩थ 2023-12-19
@nhosoya ʢࡉ୩थʣ גࣜձࣾϚωʔϑΥϫʔυ IDαʔϏε։ൃ෦ ෦ 2015 - ϚωʔϑΥϫʔυMEͷ։ൃ 2018 -
ݱࡏ ೝূج൫ͷ։ൃ <- ࠓ͜ͷ
ϚωʔϑΥϫʔυͷαʔϏε
͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕
ೝূج൫ͷ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ڞ༗DBΞʔΩςΫνϟͷݶքʢ- 2017ʣ • ࿈͢ΔγεςϜো • ਐԽ͠ͳ͍ೝূ • ݴޠɺΠϯϑϥͷ੍
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ೝূج൫Λ࡞Γ࢝ΊΔʢ20181݄͝Ζʣ w 0QFO*%$POOFDUͷ࠾༻ w طଘαʔϏεͷೝূج൫ͷҠߦํ w *%BB4WTࣗ࡞ೝূج൫
OpenID Connect ͷ࠾༻ w αʔϏεೝূج൫ʹೝূΛҕৡ͢Δ͚ͩ
طଘαʔϏεͷೝূج൫ͷҠߦํ w ֤αʔϏε͕ҙͷλΠϛϯάͰೝূج൫ରԠͰ͖ΔΑ͏ʹ ڞ༗%#ͷσʔλॻ͖ࠐΈܧଓͯ͠ޓੑΛอͭ
IDaaS vs ࣗ࡞ೝূج൫ w ࣗ࡞Λબͨ͠ w ίετ w ϕϯμʔϩοΫΠϯͷճආ w
ෳࡶͳཁ݅ͷରԠͷॊೈੑ w *%ͷΤΩεύʔτͱͷ૬ஊ ʢ0QFO*%'PVOEBUJPO+BQBOͳͲʣ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ೝূج൫͕Ͱ͖ͨ͜ͱͰਐԽͨ͠ೝূ • TOTP Ͱͷ 2FA ʢ2018ʣ • Sign in with
Apple ʢ2020ʣ • Τϯϓϥ͚ SAML SSO ʢ2020ʣ • WebAuthn ରԠʢ2022ʣ/ ύεΩʔରԠʢ2023ʣ 5લ·Ͱ࣌ͰϨΨγʔͳೝূ͔͠ఏڙͰ͖͍ͯͳ͔ͬ ͨͷʹɺࠓͰ࠷৽ͷೝূΛ͍ͪૣ͘ఏڙͰ͖ΔΑ͏ʹͳͬͨ
·ͱΊ w ؒͰੵٕͬͨज़తෛ࠴ɺ·ͬͨ͘ਐԽ͠ͳ͍ೝূ w ͔͚ͯೝূج൫Λࣗ࡞ͯ͠ॳظϦϦʔε w ͔͚ͯطଘαʔϏεͷೝূॲཧΛͯ͢ೝূج൫ʹࡌͤସ͑ྃ ʢ͞ΒʹܦͬͨݱࡏͰೝূҎ֎ͷͱ͜ΖͰ%#ڞ༗͕͓ͬͯΓʹશղফ༧ఆʣ w ৫ʹ*%νʔϜཱ͕֬ͨ͠
w ೝূͷϞμϯԽɺ.645͔Β8*-- w 0QFO*%4VNNJU5PLZPʹߦ͘ͱ͍͍ͱࢥ͏
Thank you!