OPTiM サービスでの OAuth 2.0/OpenID Connect と周辺技術の活用事例

Slide 1

Slide 1 text

Slide 2

Slide 2 text

Copyright © 2019 OPTiM Corp. All Rights Reserved. 2 p Yuu Kikuchi p Works at OPTiM Inc. (2014 ~) p Engineer at Platform business division p in OPTiM... • OPTiM Store (2016 ~) • OPTiM Cloud IoT OS/LANDLOG (2017 ~) p in OIDF-J… • Enterprise Identity WG Phase 3 (2016 ~) • KYC WG (2019 ~)

Slide 3

Slide 3 text

Slide 4

Slide 4 text

Slide 5

Slide 5 text

Slide 6

Slide 6 text

Slide 7

Slide 7 text

Copyright © 2019 OPTiM Corp. All Rights Reserved. 7 p Shared Database • Authorization Server Resource Server Access Token e • eDB k S p Token Introspection • Access Token T R T Authorization Server • Authorization Server k p Formatted Access Token • Access Token A • Resource Server Access Token Resource Server k c S

Slide 8

Slide 8 text

Slide 9

Slide 9 text

Slide 10

Slide 10 text

Slide 11

Slide 11 text

Slide 12

Slide 12 text

Slide 13

Slide 13 text

Copyright © 2019 OPTiM Corp. All Rights Reserved. 20 B p $!&'+57;#<4@=/6 OAuth PKCE (RFC7636) A3 p Device 57;08JWT Profile for OAuth 2.0 Client Authentication (RFC7523) A3 p '* "%(?9'+1 ,-.)D OpenID Connect Session Management A3 • :'+2C iOS 12 (ITP2.0) >

Slide 14

Slide 14 text

Slide 15

Slide 15 text

Copyright © 2019 OPTiM Corp. All Rights Reserved. 22 P S p SaaS Marketplace o • SaaS Marketplace T e • ID i p OPTiM Store • API t ”Contract API” • r M P SO ”SCIM API” • IDaaS Single-Sign On “OpenID Connect"

Slide 16

Slide 16 text

Slide 17

Slide 17 text

Slide 18

Slide 18 text

Slide 19

Slide 19 text

Slide 20

Slide 20 text

Slide 21

Slide 21 text

Slide 22

Slide 22 text

Slide 23

Slide 23 text

Slide 24

Slide 24 text

Slide 25

Slide 25 text

Slide 26

Slide 26 text

Slide 27

Slide 27 text

Slide 28

Slide 28 text

Slide 29

Slide 29 text

Slide 30

Slide 30 text

Copyright © 2019 OPTiM Corp. All Rights Reserved. 40 GR_ p OAuth Client / OIDC RP UX[ab W< • 3(16,58./,58ZEEQ `C>: • (BackendM ) &).-2)8%Cookie^! • 7*&'2%DF" H!AS #! • ">NIdP ./,58%=9LB] • PKCE code_challenge %J?IC>: p @\ ;$JWT iat/exp JPT+- >? • " IaaS ,-04@O KWYVF

Slide 31

Slide 31 text

Slide 32

Slide 32 text