Upgrade to Pro
— share decks privately, control downloads, hide ads and more …
Speaker Deck
Features
Speaker Deck
PRO
Sign in
Sign up for free
Search
Search
マネーフォワードの認証基盤の現在地
Search
nhosoya
December 18, 2023
1
1.2k
マネーフォワードの認証基盤の現在地
nhosoya
December 18, 2023
Tweet
Share
More Decks by nhosoya
See All by nhosoya
マネーフォワードの認証基盤のこれまでとこれから
nhosoya
0
2.1k
Featured
See All Featured
How to Think Like a Performance Engineer
csswizardry
25
1.8k
Build The Right Thing And Hit Your Dates
maggiecrowley
37
2.8k
Scaling GitHub
holman
461
140k
Fantastic passwords and where to find them - at NoRuKo
philnash
51
3.3k
Building Adaptive Systems
keathley
43
2.7k
Building Flexible Design Systems
yeseniaperezcruz
328
39k
The MySQL Ecosystem @ GitHub 2015
samlambert
251
13k
Designing for humans not robots
tammielis
253
25k
Navigating Team Friction
lara
187
15k
Distributed Sagas: A Protocol for Coordinating Microservices
caitiem20
331
22k
Performance Is Good for Brains [We Love Speed 2024]
tammyeverts
10
990
Dealing with People You Can't Stand - Big Design 2015
cassininazir
367
26k
Transcript
ϚωʔϑΥϫʔυͷ ೝূج൫ͷݱࡏ גࣜձࣾϚωʔϑΥϫʔυ @nhosoya ࡉ୩थ 2023-12-19
@nhosoya ʢࡉ୩थʣ גࣜձࣾϚωʔϑΥϫʔυ IDαʔϏε։ൃ෦ ෦ 2015 - ϚωʔϑΥϫʔυMEͷ։ൃ 2018 -
ݱࡏ ೝূج൫ͷ։ൃ <- ࠓ͜ͷ
ϚωʔϑΥϫʔυͷαʔϏε
͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕ ͜͜ʹςΩετ͕ೖΓ·͢͜͜ʹςΩετ͕
ೝূج൫ͷ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ڞ༗DBΞʔΩςΫνϟͷݶքʢ- 2017ʣ • ࿈͢ΔγεςϜো • ਐԽ͠ͳ͍ೝূ • ݴޠɺΠϯϑϥͷ੍
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ೝূج൫Λ࡞Γ࢝ΊΔʢ20181݄͝Ζʣ w 0QFO*%$POOFDUͷ࠾༻ w طଘαʔϏεͷೝূج൫ͷҠߦํ w *%BB4WTࣗ࡞ೝূج൫
OpenID Connect ͷ࠾༻ w αʔϏεೝূج൫ʹೝূΛҕৡ͢Δ͚ͩ
طଘαʔϏεͷೝূج൫ͷҠߦํ w ֤αʔϏε͕ҙͷλΠϛϯάͰೝূج൫ରԠͰ͖ΔΑ͏ʹ ڞ༗%#ͷσʔλॻ͖ࠐΈܧଓͯ͠ޓੑΛอͭ
IDaaS vs ࣗ࡞ೝূج൫ w ࣗ࡞Λબͨ͠ w ίετ w ϕϯμʔϩοΫΠϯͷճආ w
ෳࡶͳཁ݅ͷରԠͷॊೈੑ w *%ͷΤΩεύʔτͱͷ૬ஊ ʢ0QFO*%'PVOEBUJPO+BQBOͳͲʣ
ͬ͘͟Γද 2012 ϚωʔϑΥϫʔυ ME αʔϏε։࢝ 2013 - ৭ʑͳαʔϏε͕ϦϦʔε 2017 ڞ༗DBΞʔΩςΫνϟͷݶք
2018ʢ1݄ʣ ೝূج൫։ൃ։࢝ 2018ʢ12݄ʣ ೝূج൫ϦϦʔε 2020 શαʔϏε͕ೝূج൫ͷҠߦྃ
ೝূج൫͕Ͱ͖ͨ͜ͱͰਐԽͨ͠ೝূ • TOTP Ͱͷ 2FA ʢ2018ʣ • Sign in with
Apple ʢ2020ʣ • Τϯϓϥ͚ SAML SSO ʢ2020ʣ • WebAuthn ରԠʢ2022ʣ/ ύεΩʔରԠʢ2023ʣ 5લ·Ͱ࣌ͰϨΨγʔͳೝূ͔͠ఏڙͰ͖͍ͯͳ͔ͬ ͨͷʹɺࠓͰ࠷৽ͷೝূΛ͍ͪૣ͘ఏڙͰ͖ΔΑ͏ʹͳͬͨ
·ͱΊ w ؒͰੵٕͬͨज़తෛ࠴ɺ·ͬͨ͘ਐԽ͠ͳ͍ೝূ w ͔͚ͯೝূج൫Λࣗ࡞ͯ͠ॳظϦϦʔε w ͔͚ͯطଘαʔϏεͷೝূॲཧΛͯ͢ೝূج൫ʹࡌͤସ͑ྃ ʢ͞ΒʹܦͬͨݱࡏͰೝূҎ֎ͷͱ͜ΖͰ%#ڞ༗͕͓ͬͯΓʹશղফ༧ఆʣ w ৫ʹ*%νʔϜཱ͕֬ͨ͠
w ೝূͷϞμϯԽɺ.645͔Β8*-- w 0QFO*%4VNNJU5PLZPʹߦ͘ͱ͍͍ͱࢥ͏
Thank you!