2. エンタープライズでも
OpenID Connect
Regional Solutions Architect 福家 大輔
2014/3/7
Copyright © 2014 Ping Identity Corp.All rights reserved. 2

3. Identity Bridge: PingFederate 7
Copyright © 2014 Ping Identity Corp.All rights reserved. 3
多様なスタンダードに対応したアイデンティティブリッジ
Identity
Standards
Integration
Kits
Integration
Kits
Identity
Standards
Applications

4. OpenID Connect (OP)
OAuth2 (AS)
SCIM 1.1
SAML 2.0/1.1/1.0
WS-Federation
WS-Trust STS (IP-STS)
ActiveDirectory
LDAP / Radius
OpenID
API (Twitter/Facebook
etc)
2nd-factor(Google
Authenticator等)
Custom, etc…
PingFederate 7: IdPとしての機能
Copyright © 2014 Ping Identity Corp.All rights reserved. 4
Integration
Kits
Identity
Standards

5. PingFederate 7: 一般的な利用例
Copyright © 2014 Ping Identity Corp.All rights reserved. 5
Directory
SaaS
Mobile
Custom
&
Legacy
ディレクトリの
クレデンシャルで認証
OpenID Connect
SAML

6. PingFederate 7: こんなこともできる構成例
Copyright © 2014 Ping Identity Corp.All rights reserved. 6
SaaS
Mobile
Custom
&
Legacy
OpenID ConnectSAML
IdP
SAML
足りない属性は
補完
OpenID
OP
OpenID
Twitter
API
OAuth2

7. PingAccess:
NextGen Web/API Access Management Gateway
Copyright © 2014 Ping Identity Corp.All rights reserved. 7
OpenID Connect

8. PingAccess: AuthN/AuthZ flow
アクセス
OpenID Connectによる認証
リクエストおよび ID Tokenの発⾏行行
ポリシーによる
アクセス認可
アクセス
Web Apps
APIs

9. Why OpenID Connect?
Copyright © 2014 Ping Identity Corp.All rights reserved. 9
SmartPhone
Tablet Browser
API+native app WebSSO