端端舝

? Hitachi, Ltd. 2022. All rights reserved.
Keycloak及窒
~ 鬼梗聆釵梭棗硃域及旦氾永皿失永皿＇偩卞勾中化 ~
OSS本平亙伉氾奴撮胍及頗菴11隙辭�頗
絁宒頗扦゜蕾庨釬垀
泬庭膽眳

1
赻撩畿賡
泬庭膽眳 (凶壬凶方仄斗五)
? 絁宒頗扦゜蕾庨釬垀失奈平氾弁民乓本件正
? 末白玄它尼失巨件斥瓦失
? GitHub: @y-tabata, Qiita: @yo-tabata
? 庲偩庲褫支API憝窣煦珧及末伉亙奈扑亦件嶱逃&戊件扔伙氾奴件弘
? 踢⺈﹜鼠僕﹜扦頗﹜宴𦲀煦珧卞云仃月
API奪燴價屜支庲偩庲褫扑旦氾丞及爀⻌盓堔
? 庲偩庲褫?API奪燴憝窣及OSS尺及戊件玄伉申亙奈玄
? Keycloak (IAM及OSS)
? 3scale (API奪燴及OSS)
? ロ�逃陓
? Keycloak𤩸戮
? ThinkIT/@IT匹及Web�岈窣徭
? Apidays/Open Source Summit/CloudNative Days卅升﹜弊囀俋及奶矛件玄匹及腎�

Contents
2
1. ☆灍犛 Keycloak 求OpenID Connect﹜OAuth 2.0毛瞳蚚
仄凶乒母件失皿伉弗奈扑亦件及本平亙伉氾奴奈悵荾★
及仍畿賡
2. Keycloak及旦氾永皿失永皿庲偩

Contents
3
及仍畿賡

4
? 灍犛 Keycloak
OpenID Connect﹜OAuth 2.0毛瞳蚚仄凶乒母件失皿伉弗奈扑亦件及本平亙伉氾奴奈悵荾
https://www.amazon.co.jp/dp/4814400098
? Keycloak及皿伕斥尼弁玄伉奈母奈及Stian午戊失犯奴矛伕永由奈及Pedro互𤩸中凶☆Keycloak -
Identity and Access Management for Modern Applications★及゜掛惤楹偈掛﹝
? 楹偈氪反﹜゜掛�Keycloak戊件玄伉申亙奈正奈4靡﹝
? NRI及睿泬今氏(仇及摽腎�)
? NRI及泬游今氏
? ゜蕾及�\侂今氏(丟件氾瓜求)
? ゜蕾及泬庭(佌)
? 凶分及楹偈掛匹反卅中﹝
? 埻𤩸反Keycloak 12.0.4&WildFly矛奈旦及�傖匹丐勻凶互﹜嘉中凶戶﹜
Keycloak 18.0.2&Quarkus矛奈旦及�傖卞芃陔﹝
? 弁仿奶失件玄禾伉扑奈毛妏勻化FAPI卅升及本平亙伉氾奴奈皿伕白央奶伙毛羥蚚允月源楊毛
掊隴仄凶゜掛惤唳娗梒☆弁仿奶失件玄禾伉扑奈卞方月本平亙伉氾奴奈悵荾★毛陔�袚樓﹝
𤩸戮及仍畿賡 (1/2)

5
? 灍犛 Keycloak
OpenID Connect﹜OAuth 2.0毛瞳蚚仄凶乒母件失皿伉弗奈扑亦件及本平亙伉氾奴奈悵荾
? ゴ隙及菴10隙辭�頗匹仍畿賡仄凶☆庲偩午庲褫鬼梗聆釵梭棗硃域⻌藷★午及綃中
? 方曰灍犛腔卅囀⺍卞卅勻化中引允﹝
? 灍蕣及Keycloak及魂蚚源楊卞勾中化﹜末奈旦戊奈玉井日仄井眭曰腕卅井勻凶
方丹卅ロ�手�曰蝠兮卅互日仍畿賡仄化中引允﹝
? 升丹交奈扒奈毛庲偩/伕弘失它玄允月井
? 升丹失皿伉弗奈扑亦件午緙磁允月井
? 升丹失皿伉弗奈扑亦件/交奈扒奈毛庲褫允月井
? 升丹失皿伉弗奈扑亦件及本平亙伉氾奴奈毛悵荾允月井
? 升丹掛楓虐噫毛�慷允月井
? 今引介引卅辻夔毛�允仇午互匹五月戊奈玉伉禾斥玄伉奈手鼠嶱仄化中引允﹝↗仇切日手KC18�𡛟
𦤦心﹝
https://github.com/Keycloak-IAM-4-Modern-Apps-JP/Keycloak-Identity-and-Access-
Management-for-Modern-Applications
𤩸戮及仍畿賡 (2/2)

Contents
6
及仍畿賡

7
旦氾永皿失永皿庲偩午反
? 旦氾永皿失永皿庲偩午反﹜斛猁卞𡛟元化袚樓及庲偩源楊毛偞隅匹五月辻夔匹允﹝
? Keycloak 18匹扔禾奈玄今木凶辻夔匹﹜矢奈斥杅及飲磁奻﹜𤩸戮匹反民仿永午仄井腎�仄卅
中凶戶﹜仇仇匹仍畿賡仄凶中午佷中引允﹝
? 瞰尹壬眕狟及方丹卅扑民亙巨奈扑亦件匹晞瞳匹允﹝
? 㜳丹ロ�及笭猁僅卞方勻化﹜庲偩及�僅毛劐尹凶中﹝
↙ 庌靡支丟奈伙失玉伊旦統桽媆反由旦伐奈玉庲偩及心午仄﹜
諳釱紹詢統桽媆反汜极庲偩毛袚樓允月﹝
? 祥淏失弁本旦卞方月ロ�穢尹中毛幏𦑩仄凶中﹝
↙ 中勾手午反�卅月IP失玉伊旦井日及失弁本旦卞反﹜癩及凶戶OTP庲偩毛袚樓允月﹝
? 仇木日毛SPI↗及市旦正穴奶朮卅仄匹偞隅匹五月方丹卞卅曰引仄凶ㄐ
↗Keycloak掛极及末奈旦戊奈玉毛蜊劐允月仇午卅仁﹜今引介引卅辻夔毛Keycloak卞袚樓匹五月帊瞎心﹝

8
旦氾永皿失永皿庲偩及偞隅源楊 (1/3)
? Keycloak及偞隅源楊
Ｋ旦氾永皿失永皿庲偩蚚及庲偩白伕奈隅膽毛釬傖允月
Ｌ ACR午LoA及穴永疋件弘毛釬傖允月
ACR: 庲偩源楊毛Е�e允月凶戶及舑�e赽﹝OIDC卞隅膽今木化中月﹝
LoA: 庲偩及伊矛伙(Level of Authentication)毛桶允杅�﹝Keycloak囀窒匹庲偩及伊矛伙
及奻狟毛掀廌允月凶戶卞妏歹木月﹝
↗價掛腔卞�I源午手伊伙丞�g弇匹偞隅允月﹝弁仿奶失件玄�g弇匹及偞隅奻𤩸五手褫夔﹝

9
Ｋ旦氾永皿失永皿庲偩蚚及庲偩白伕奈隅膽毛釬傖允月
LoA互1及�磁﹜
由旦伐奈玉庲偩毛允月﹝
LoA互2及�磁﹜
由旦伐奈玉庲偩午
OTP庲偩毛允月﹝

10
Ｌ ACR午LoA及穴永疋件弘毛釬傖允月
ACR: silver = LoA: 1
ACR: gold = LoA: 2

11
旦氾永皿失永皿庲偩及霜木 (1/7)
弁仿奶失件玄/RP
? 瞰: OAuth 2.0/OIDC及庲褫戊奈玉白伕奈及�磁
庲褫扔奈田奈/OP 伉末奈旦扔奈田奈
伉末奈旦左奈瓜求/
巨件玉交奈扒奈及
皮仿它扒奈
庲褫/庲偩伉弁巨旦玄
庲褫/庲偩伊旦禾件旦
由旦伐奈玉庲偩
OTP庲偩
玄奈弁件伉弁巨
旦玄
API伉弁巨旦玄

12
皮仿它扒奈
OTP庲偩
旦玄
API伉弁巨旦玄
庲褫/庲偩伉弁巨旦玄卞acr_values毛
葆仃化﹜庲偩及伊矛伙毛硌隅匹五月﹝
----
GET /auth HTTP/1.1
Host: Keycloak
response_type=code
&client_id=<弁仿奶失件玄ID>
&redirect_uri=<伉母奶伊弁玄URI>
&scope=openid
&acr_values=silver | gold
↗claims由仿丟奈正手褫﹝

13
皮仿它扒奈
OTP庲偩
旦玄
API伉弁巨旦玄

14
皮仿它扒奈
OTP庲偩
旦玄
API伉弁巨旦玄
acr_values互gold分勻凶�磁

15
皮仿它扒奈
OTP庲偩
旦玄
API伉弁巨旦玄

16
皮仿它扒奈
OTP庲偩
旦玄
API伉弁巨旦玄
ID玄奈弁件及acr弁伊奈丞卞silver | gold
午中丹�互跡慮今木月﹝
仇木卞方曰弁仿奶失件玄/RP反﹜
羥ピ卅伊矛伙及庲偩互卅今木凶仇午毛
復庲匹五月﹝

17
皮仿它扒奈
OTP庲偩
旦玄
API伉弁巨旦玄
失弁本旦玄奈弁件及acr弁伊奈丞卞
silver | gold 午中丹�互跡慮今木月﹝
仇木卞方曰伉末奈旦扔奈田奈反﹜
羥ピ卅伊矛伙及庲偩互卅今木凶仇午毛
復庲匹五月﹝
↗Keycloak及失弁本旦玄奈弁件反
失扔奈扑亦件倰(JWT)﹝
失弁本旦玄奈弁件及acr弁伊奈丞反
RFC 9068卞𨃨�仄凶倛﹝

18
(犯乒)
旦氾永皿失永皿庲偩及霜木毛灍蕣卞�化心方丹ㄐ

19
引午戶
- 陔𤩸戮☆灍犛 Keycloak 求OpenID Connect﹜OAuth 2.0毛瞳蚚仄凶乒母件失皿伉
弗奈扑亦件及本平亙伉氾奴奈悵荾★毛仍畿賡仄引仄凶﹝
- Keycloak毛妏勻凶旦氾永皿失永皿庲偩及源楊毛犯乒毛蝠尹化仍畿賡仄引仄凶﹝

20
Trademarks
? OpenID is a trademark or registered trademark of OpenID Foundation in the United States and other
countries.
? GitHub is a trademark or registered trademark of GitHub, Inc. in the United States and other
countries.
? Other brand names and product names used in this material are trademarks, registered trademarks,
or trade names of their respective holders.

鬼梗聆釵梭棗硃域及旦氾永皿失永皿＇偩卞勾中化

端端舝

鬼梗聆釵梭棗硃域及旦氾永皿失永皿＇偩卞勾中化

Recommended

More Related Content

What's hot (20)

Similar to 鬼梗聆釵梭棗硃域及旦氾永皿失永皿＇偩卞勾中化 (20)

More from Hitachi, Ltd. OSS Solution Center. (20)

Recently uploaded (8)

鬼梗聆釵梭棗硃域及旦氾永皿失永皿＇偩卞勾中化