なんとなくわかるSAML / Somewhat understandable SAML

2021年11月27日に開催したNuCon 2021の発表資料です。

アーカイブ動画「NuCon 2021」
https://youtu.be/ITh1MMp6OLk

Transcript

1. ͳΜͱͳ͘Θ͔Δ4".- גࣜձࣾψʔϥϘ
   αʔϏε։ൃ෦
   "QQT՝
   σϖϩούʔ
   ኍ੉
   ᠳང Copyright Nulab Inc. All Rights Reserved.
2. Copyright Nulab Inc. All Rights Reserved. ,BOBUB
   )JSPTF ࣗݾ঺հ αʔϏε։ൃ෦
   "QQT՝
   σϖϩούʔ ೥ೖࣾ
   ɾΞΧ΢ϯτ؅ཧೝূೝՄܾࡁ
   ɾ/VMBC
   1BTTͷ։ൃ
3. ࠓ೔ͷ໨ඪ Copyright Nulab Inc. All Rights Reserved.
4. Copyright Nulab Inc. All Rights Reserved. ࠓ೔ͷ໨ඪ 4".-ͷ࢓૊Έʹ͍ͭͯ
   ͳΜͱͳ͘Θ͔ͬͯ΋Β͏
5. 4".-
   
   ͱ͸ Copyright Nulab Inc. All Rights Reserved.
6. Copyright Nulab Inc. All Rights Reserved. 4".-
    4".-
   ͱ͸ ɾҟͳΔΠϯλʔωοτυϝΠϯؒͰϢʔβʔೝূΛߦ͏ͨΊͷ
   ɹ9.-Λϕʔεʹͨ͠ඪ४ن֨
   ɹ೥ɿࡦఆ
   ɹ೥ɿόʔδϣϯ
   ɾೝূͱೝՄʹରԠ͢Δϓϩτίϧ
   ɾγϯάϧαΠϯΦϯʹΑ͘༻͍ΒΕΔ
   4FDVSJUZ
   "TTFSUJPO
   .BSLVQ
   -BOHVBHF
7. Copyright Nulab Inc. All Rights Reserved. 8FC
   #SPXTFS
   440
   1SPGJMF 4".-
   ͱ͸ ͱݺ͹ΕΔೝূϑϩʔʹ͍͓ͭͯ࿩͍͖ͯ͠·͢ɻ ࠓճ͸࠷΋ओྲྀͰ͋Δɺ
8. ొ৔ਓ෺ Copyright Nulab Inc. All Rights Reserved.
9. Copyright Nulab Inc. All Rights Reserved. ొ৔ਓ෺ ొ৔ਓ෺͸
   ਓ
10. Copyright Nulab Inc. All Rights Reserved. 6TFS
    "HFOU ɾར༻ऀ
    ɾϢʔβʔ͕࢖༻͢Δϒϥ΢βΛࢦ͢͜ͱ͕ଟ͍ ొ৔ਓ෺
    ʛ
    6TFS
    "HFOU ొ৔ਓ෺͸
    ਓ
11. Copyright Nulab Inc. All Rights Reserved. 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS ɾར༻ऀ
    ɾϢʔβʔ͕࢖༻͢Δϒϥ΢βΛࢦ͢͜ͱ͕ଟ͍ ొ৔ਓ෺͸
    ਓ ɾೝূ৘ใΛఏڙ͢Δଆ
    *E1
    ɾ"[VSF
    "%΍0LUB౳ɺ*%Λ؅ཧ͢Δ΋ͷ ొ৔ਓ෺
    ʛ
    *EFOUJUZ
    1SPWJEFS
12. Copyright Nulab Inc. All Rights Reserved. 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ɾར༻ऀ
    ɾϢʔβʔ͕࢖༻͢Δϒϥ΢βΛࢦ͢͜ͱ͕ଟ͍ ొ৔ਓ෺͸
    ਓ ɾೝূ৘ใΛఏڙ͢Δଆ
    *E1
    ɾ"[VSF
    "%΍0LUB౳ɺ*%Λ؅ཧ͢Δ΋ͷ ɾೝূ৘ใΛ࢖༻͢Δଆ
    41
    ɾओʹ4BB4 ొ৔ਓ෺
    ʛ
    4FSWJDF
    1SPWJEFS
13. ೝূͷྲྀΕ Copyright Nulab Inc. All Rights Reserved.
14. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS
15. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ͓ޓ͍ͷ৘ใΛ
    ࣄલʹަ׵͓ͯ͘͠ ࣄલʹ৴པؔ܎ͷߏங͕ඞཁ
16. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 
17. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU  
18. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ   
19. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO    
20. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO    
21. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO 4".-
    "TTFSUJPO ݕূ     
22. Copyright Nulab Inc. All Rights Reserved. ೝূͷྲྀΕ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO 4".-
    "TTFSUJPO ݕূ     
23. 4".-
    "TTFSUJPO Copyright Nulab Inc. All Rights Reserved.
24. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO
25. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     4".-
    "TTFSUJPOʹ͸͜ͷΑ͏ͳ৘ใ͕ೖ͍ͬͯΔ ˞આ໌ͷͨΊ؆ུԽ͍ͯ͠·͢
26. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     ϢʔβʔͷϚοϐϯάʹ͸/BNF
    *%Λ࢖༻
27. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
28. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN ϚοϐϯάͰ͖ͳ͍ͧʁ
    ϑΥʔϚοτ͕͋ͬͯͳ͍ʁ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
29. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%ͷϑΥʔϚοτΛઃఆ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
30. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT /BNF
    *%ͷϑΥʔϚοτΛઃఆ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
31. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    IJSPTF!FYBNQMFDPN
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT /BNF
    *%ͷϑΥʔϚοτ͕ϝʔϧΞυϨεʹ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
32. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    IJSPTF!FYBNQMFDPN
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT ֘౰ͷΞΧ΢ϯτ͕ϚοϐϯάͰ͖ͨ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
33. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    IJSPTF!FYBNQMFDPN
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT 4".-
    "TTFSUJPOʹ͸
    վ͟Μ๷ࢭͷͨΊॺ໊͕ඞཁ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
34. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    IJSPTF!FYBNQMFDPN
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT ِ଄͞Εͯͳ͍͔ॺ໊Λ֬ೝ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
35. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    IJSPTF!FYBNQMFDPN
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT signature *E1 /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
36. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    IJSPTF!FYBNQMFDPN
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT signature ࣄલʹূ໌ॻ͸ަ׵͓ͯ͘͠ 9ূ໌ॻ 9ূ໌ॻ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
37. Copyright Nulab Inc. All Rights Reserved. 4".-
    "TTFSUJPO *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS 4".-
    "TTFSUJPO /BNF
    *%
    IJSPTF!FYBNQMFDPN
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝ ൃߦऀ
    )0(&
    *E1 ༗ޮظݶ
    
     *% EPHHP!FYBNQMFDPN QFOHV!FYBNQMFDPN DBUUP!FYBNQMFDPN IJSPTF!FYBNQMFDPN /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT signature 9ূ໌ॻ 9ূ໌ॻ /BNF
    ,BOBUB
    )JSPTF
    &NBJM
    IJSPTF!FYBNQMFDPN
    ॴଐ
    "QQT՝
38. Copyright Nulab Inc. All Rights Reserved. .FUBEBUB *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT 9ূ໌ॻ 9ূ໌ॻ FUD FUD ৴པؔ܎Λߏங͢Δʹ͸
    ৭ʑ৘ใΛަ׵͢Δඞཁ͕͋Δ
39. Copyright Nulab Inc. All Rights Reserved. .FUBEBUB *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS /BNF
    *%͸
    ϝʔϧΞυϨεͰཉ͍͠ /BNF
    *%͸
    ϝʔϧΞυϨεͰ౉͢ VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT VSOPBTJTOBNFTUD4".-OBNFJE GPSNBUFNBJM"EESFTT .FUBEBUB 9ূ໌ॻ 9ূ໌ॻ 9.- FUD FUD
40. σʔλͷड͚౉͠ Copyright Nulab Inc. All Rights Reserved.
41. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO 4".-
    "TTFSUJPO ݕূ     
42. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO 4".-
    "TTFSUJPO ݕূ     
43. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ 4".-
    #JOEJOHT
44. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ )551
    3FEJSFDU
    #JOEJOH
    4".-
    #JOEJOHT )551
    1045
    #JOEJOH
    
45. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ )551
    3FEJSFDU
    #JOEJOH
    4".-
    #JOEJOHT )551
    1045
    #JOEJOH
    4".-
    3FRVFTUʹ࢖༻Մೳ https://idp.example.com?SAMLRequest=value 302: Redirect 41 *E1 User Agent
46. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ )551
    3FEJSFDU
    #JOEJOH
    4".-
    #JOEJOHT )551
    1045
    #JOEJOH
    4".-
    3FRVFTUʹ࢖༻Մೳ 4".-
    3FRVFTU΍4".-
    "TTFSUJPOͷड͚౉͠ʹ࢖༻Մೳ https://idp.example.com?SAMLRequest=value 302: Redirect 41 *E1 User Agent POST *E1 41 User Agent ********** SAML Response Submit
47. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ )551
    3FEJSFDU
    #JOEJOH
    4".-
    #JOEJOHT )551
    1045
    #JOEJOH
    4".-
    3FRVFTUʹ࢖༻Մೳ 4".-
    3FRVFTU΍4".-
    "TTFSUJPOͷड͚౉͠ʹ࢖༻Մೳ https://idp.example.com?SAMLRequest=value 302: Redirect 41 *E1 User Agent POST *E1 41 User Agent ********** SAML Response Submit Ϣʔβʔͷϒϥ΢βΛܦ༝ͯ͠
    σʔλΛ΍ΓͱΓ͢Δ
48. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ )551
    3FEJSFDU
    #JOEJOH
    4".-
    #JOEJOHT )551
    1045
    #JOEJOH
    4".-
    3FRVFTUʹ࢖༻Մೳ 4".-
    3FRVFTU΍4".-
    "TTFSUJPOͷड͚౉͠ʹ࢖༻Մೳ https://idp.example.com?SAMLRequest=value 302: Redirect 41 *E1 User Agent POST *E1 41 User Agent ********** SAML Response Submit Ϣʔβʔͷϒϥ΢βΛܦ༝ͯ͠
    σʔλΛ΍ΓͱΓ͢Δ
49. Copyright Nulab Inc. All Rights Reserved. σʔλͷड͚౉͠ )551
    3FEJSFDU
    #JOEJOH
    4".-
    #JOEJOHT )551
    1045
    #JOEJOH
    4".-
    3FRVFTUʹ࢖༻Մೳ 4".-
    3FRVFTU΍4".-
    "TTFSUJPOͷड͚౉͠ʹ࢖༻Մೳ https://idp.example.com?SAMLRequest=value 302: Redirect 41 *E1 User Agent POST *E1 41 User Agent ********** SAML Response Submit Ϣʔβʔͷϒϥ΢βΛܦ༝ͯ͠
    σʔλΛ΍ΓͱΓ͢Δ JavaScript౳Λ༻͍ͯࣗಈͰSubmit
50. ೝূϑϩʔ Copyright Nulab Inc. All Rights Reserved.
51. Copyright Nulab Inc. All Rights Reserved. ೝূϑϩʔ
    ʛ
    41JOJUJBUFE 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO 4".-
    "TTFSUJPO ݕূ     
52. Copyright Nulab Inc. All Rights Reserved. ೝূϑϩʔ
    ʛ
    41JOJUJBUFE 41JOJUJBUFE HTTP Redirect Binding HTTP POST Binding 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ 4".-
    3FRVFTU ೝূ 4".-
    "TTFSUJPO 4".-
    "TTFSUJPO ݕূ     
53. Copyright Nulab Inc. All Rights Reserved. ೝূϑϩʔ
    ʛ
    *E1JOJUJBUFE *E1JOJUJBUFE HTTP POST Binding 6TFS
    "HFOU *EFOUJUZ
    1SPWJEFS 4FSWJDF
    1SPWJEFS ৴པؔ܎ ϩάΠϯ ೝূ 4".-
    "TTFSUJPO 4".-
    "TTFSUJPO ݕূ    
54. ͍͞͝ʹ Copyright Nulab Inc. All Rights Reserved.
55. Copyright Nulab Inc. All Rights Reserved. ͍͞͝ʹ 4".-ͷΠϝʔδ͕ͳΜͱͳ͘௫Ί·ͨ͠Ͱ͠ΐ͏͔ʁ
    4".-͸೔ຊޠͷઆ໌ࢿྉ͕ඇৗʹগͳ͍Ͱ͢ɻ
    ࣮૷ʹؔͯ͠ɺମܥతʹ·ͱ·ͬͨ৘ใ͸೔ຊʹ͸΄ͱΜͲଘࡏ͍ͯ͠·ͤΜɻ
56. Copyright Nulab Inc. All Rights Reserved. ͍͞͝ʹ ;FOOʹͯ޷ධൢചதʂ ΋͏গ͠ৄ͘͠஌Γ͍ͨ৔߹͸ʜ 4".-ೖ໳ IUUQT[FOOEFWLYOUCPPLTDBDFB 4".-ೝূʹରԠͯ͠΄͍͠ͱݴΘΕͯ΋ɺ΋͏಄Λ๊͑Δඞ ཁ͸͋Γ·ͤΜɻ
    41Λ࣮૷͢Δ্Ͱࠓ·Ͱ৮ΕΒΕΔ͜ͱͷͳ͔ͬͨ
    
    Ͳ͏͍͏ઃܭ͕ඞཁ͔ʁ
    
    ԿΛؾΛ͚ͭͳ͚Ε͹ͳΒͳ͍͔ʁ
    ͷΤοηϯεΛ٧ΊࠐΈ·ͨ͠ɻ ٕज़ॻయʹ޲͚ͯ ిࢠॻ੶Խ
    ˍදࢴϦχϡʔΞϧ
    ࡞ۀத
57. ͋Γ͕ͱ͏͍͟͝·ͨ͠ Copyright Nulab Inc. All Rights Reserved.