Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
Passkey Autofill に賭けるマネーフォワード ID - Money Forwar...
Search
Nov Matake
September 20, 2024
Technology
1
880
Passkey Autofill に賭けるマネーフォワード ID - Money Forward Tech Day 2024
Nov Matake
September 20, 2024
Tweet
Share
More Decks by Nov Matake
See All by Nov Matake
OpenID Summit 2024 - Translation WG
nov
0
370
OpenID Summit 2024 - Panel : Celebrating Ten Years of OpenID Connect
nov
0
410
What’s Passkey @ AXIES 2023
nov
0
2.1k
NIST SP800-63C (rev.4) Federation & Assertions - OpenID BizDay #16
nov
0
53
#fidcon WebAuthn, Next Stage - #idcon vol.29
nov
0
2.1k
Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID TechNight vol.17
nov
0
11
Sign in with Apple ~ diff from OIDC / OAuth 2.0 & characteristic identifiers design ~ - #idcon vol.27
nov
0
14
OAuth 2.0 & OpenID Connect 基礎 @ OpenID Meetup Fukuoka
nov
2
600
IIW #13 report at idcon #10
nov
2
69
Other Decks in Technology
See All in Technology
クロージング / MIERUNE JCT - Tokyo 2024
mierune
PRO
0
290
映像・音声伝送システム
jtes
0
190
KDD2024参加報告
cyberagentdevelopers
PRO
0
150
CVE alive
ennael
PRO
0
310
SQLによるオブザーバビリティの進化とClickHouseの実力
mikimatsumoto
0
150
Making Linux sucks less
ennael
PRO
0
400
Vista FinderMx
jtes
0
160
DenoでもViteしたい!インポートパスのエイリアスを指定してラクラクアプリ開発
bengo4com
0
1.5k
可視化がやりたくてMIERUNEに転職した話 〜“思考のための道具”とコンピューターによる新たな表現〜 / MIERUNE JCT - Tokyo 2024
sorami
2
450
OPENLOGI Company Profile for engineer
hr01
1
12k
【shownet.conf_】ShowNet x 宇宙ネットワーク
shownet
PRO
0
270
Android15(SDK35)から強制される、Edge-to-Edgeに対応しなければならない
sansantech
PRO
1
600
Featured
See All Featured
Making Projects Easy
brettharned
114
5.8k
Large-scale JavaScript Application Architecture
addyosmani
509
110k
Save Time (by Creating Custom Rails Generators)
garrettdimon
PRO
25
640
Keith and Marios Guide to Fast Websites
keithpitt
408
22k
Typedesign – Prime Four
hannesfritz
39
2.3k
5 minutes of I Can Smell Your CMS
philhawksworth
202
19k
[RailsConf 2023] Rails as a piece of cake
palkan
49
4.7k
Responsive Adventures: Dirty Tricks From The Dark Corners of Front-End
smashingmag
248
21k
Why You Should Never Use an ORM
jnunemaker
PRO
53
9k
Reflections from 52 weeks, 52 projects
jeffersonlam
346
20k
Unsuck your backbone
ammeep
667
57k
Robots, Beer and Maslow
schacon
PRO
157
8.2k
Transcript
Passkey Autofill ʹṌ͚Δ ϚωʔϑΥϫʔυ ID Money Forward ID Focuses on
Passkey Autofill
Nov Matake Rubyist, Digital Identity Specialist, OpenID Foundation Japan Evangelist,
and recently Passkey freak.
None
None
None
None
1. Password 2. Passkey (= WebAuthn) (Apr. 2023~) 3. Google
Sign-in 4. Sign in with Apple 5. TOTP 6. SAML 7. Yahoo! JAPAN ID 8. SMS OTP 9. Email OTP (Aug. 2024~) Sign-in Methods
Passkey Autofill ʹṌ͚Δ ϚωʔϑΥϫʔυ ID Money Forward ID Focuses on
Passkey Autofill
https://haveibeenpwned.com/
https://corp.moneyforward.com/news/info/20240808-mf-press-1/
➡︎ ERROR
STRONG 💪 x WEAK ↘ = WEAK ↘
Passkeys
• FIDO • WebAuthn • Biometrics • Public Key Cryptography
• etc. Passkey Components
🛡 by Password Managers
None
None
• Password Managers • iCloud Keychain • Google Password Manager
• Windows Hello • 1Password • LastPass • etc. Passkey Support • Web Sites / Apps • Google • Apple • Amazon • Yahoo! JAPAN • Mercari • etc.
STRONG 💪 x STRONG 💪 = STRONG 💪
Passkey Autofill ʹṌ͚Δ ϚωʔϑΥϫʔυ ID Money Forward ID Focuses on
Passkey Autofill
Passkey UX Challenge
هࡌ͞Ε͍ͯΔձ໊͓ࣾΑͼɾɾαʔϏε໊ʢϩΰϚʔΫΛؚΉʣɺ֤ࣾͷඪ·֤ͨݖརऀͷొඪͰ͢ɻ
Yahoo! JAPAN yahoo.co.jp Mercari jp.mericari.com Google google.com Google google.com ͜ͷϖʔδͷεΫϦʔϯγϣοτͯ͢20248~9݄ʹࡱӨͨ͠ͷͰ͢
Yahoo! JAPAN yahoo.co.jp Mercari jp.mericari.com Google google.com Google google.com ͜ͷϖʔδͷεΫϦʔϯγϣοτͯ͢20248~9݄ʹࡱӨͨ͠ͷͰ͢
🙅
Passkey Autofill ʹṌ͚Δ ϚωʔϑΥϫʔυ ID Money Forward ID Focuses on
Passkey Autofill
passkey → password →
← passkey password →
→ →
Authentication UX 👍 Registration UX 🙅
None
None
🙅
Passkey Auto Upgrade (iOS / iPadOS 18+, macOS Sequoia+)
https://developer.apple.com/jp/videos/play/wwdc2024/10125/
→ →
Passkey Autofill Registration ( n o t y e t
… )
None
None
Bye Bye Passwords 👋