optim storeにおけるscim & oidc活用事例 - id&it 2016
TRANSCRIPT
OPTiM Store SCIM & OIDC
Nov Matake
License Management
• =
•
•
• =
•
License Management
• =
•
•
• =
•
License Management
• =
•
•
• =
•
Provisioning
Federation
End User Push
End User Push
(ID & Pass / )
by OpenID Foundation Japan Enterprise Identity WG
OpenID Connect SCIM
https://www.openid.or.jp/news/2016/03/eiwg-guideline.html
Provisioning
: : :
Sync– - ID
: SaaS : SaaS : SaaS : SaaS
– - OPTiM Store
End User Push
End User Push
DONE
DONE
( )
DONE
DONE
( )
( )
DONE
DONE
( )
Federation (ID )
Active Directory OPTiM Store
OPTiM Store
SaaS ↓
Active Directory SaaS
End User Push
(ID & Pass / )
End User Push
(ID & Pass / )
ID Token (JSON Web Token : JSON)
by OpenID Foundation Japan Enterprise Identity WG
OpenID Connect SCIM
https://www.openid.or.jp/news/2016/03/eiwg-guideline.html
� ������ ����na C C rkC Ngb TC C
i () I
OC rk *
s pt
Du o 112
cjb Du oevDdf u o mlDdf u o
CU P N
� ������ ����DN 2 * * *
*
( *2( * 2( *
2 *)* *
)
*2 2 2(
**
)* ** **
*
) ( ) 1 2 *G
I C E G
Store & SaaS
End User Push
Missing Parts
Dynamic Client Registration
( …)
SCIM
OIDC
End User Push
Tenant Contract Req.
Tenant Contract Res.
SCIM Client Reg.
SCIM Client Cred.
OIDC Client Reg.
OIDC Client Cred.
Tenant Contract Req.
Tenant Contract Res.
SCIM Client Reg.
SCIM Client Cred.
OIDC Client Reg.
OIDC Client Cred.
Tenant Contract Req.
Tenant Contract Res.
SCIM Client Reg.
SCIM Client Cred.
OIDC Client Reg.
OIDC Client Cred.
Tenant Contract Req.
Tenant Contract Res.
SCIM Client Reg.
SCIM Client Cred.
OIDC Client Reg.
OIDC Client Cred.
Tenant Contract Req.
Tenant Contract Res.
SCIM Client Reg.
SCIM Client Cred.
OIDC Client Reg.
OIDC Client Cred.
Tenant Contract Req.
Tenant Contract Res.
SCIM Client Reg.
SCIM Client Cred.
OIDC Client Reg.
OIDC Client Cred.
SCIM (SaaS→Store)
SCIM
OIDC
End User Push
End User Push
(ID & Pass / )
