{"id":3187,"date":"2025-12-10T16:40:13","date_gmt":"2025-12-10T07:40:13","guid":{"rendered":"https:\/\/www.agile-software.site\/?p=3187"},"modified":"2025-12-10T16:40:14","modified_gmt":"2025-12-10T07:40:14","slug":"oidc%ef%bc%88openid-connect%ef%bc%89%e3%81%a8%e3%81%af%ef%bc%9f","status":"publish","type":"post","link":"https:\/\/agile-software.net\/?p=3187","title":{"rendered":"OIDC\uff08OpenID Connect\uff09\u3068\u306f\uff1f"},"content":{"rendered":"\n

\u30e6\u30fc\u30b6\u30fc\u8a8d\u8a3c\u3092\u5b89\u5168\u306b\u884c\u3046\u305f\u3081\u306e\u201c\u8a8d\u8a3c\u30d7\u30ed\u30c8\u30b3\u30eb\u201d<\/strong> \u3067\u3059\u3002<\/p>\n\n\n\n

\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30b5\u30fc\u30d3\u30b9\u30fb\u30af\u30e9\u30a6\u30c9\u30fb\u4f01\u696d\u30b7\u30b9\u30c6\u30e0\u3067\u5e83\u304f\u4f7f\u308f\u308c\u3066\u304a\u308a\u3001<\/p>\n\n\n\n

OAuth 2.0 \u3092\u30d9\u30fc\u30b9\u306b\u300c\u30ed\u30b0\u30a4\u30f3\uff08\u8a8d\u8a3c\uff09\u300d\u6a5f\u80fd\u3092\u8ffd\u52a0\u3057\u305f\u6a19\u6e96\u4ed5\u69d8\u3067\u3059\u3002<\/p>\n\n\n\n

\n\n\n\n

⭐ 1. OIDC\u3068\u306f\uff1f\uff08\u4e00\u8a00\u3067\uff09<\/strong><\/h1>\n\n\n\n

👉 OAuth 2.0 \u306b\u300c\u30e6\u30fc\u30b6\u30fc\u304c\u8ab0\u304b\uff08ID\u60c5\u5831\uff09\u300d\u3092\u5b89\u5168\u306b\u3084\u308a\u53d6\u308a\u3059\u308b\u4ed5\u7d44\u307f\u3092\u8ffd\u52a0\u3057\u305f\u3082\u306e\u3002<\/strong><\/h3>\n\n\n\n

OAuth2\u306f\u300c\u6a29\u9650\uff08\u4f55\u304c\u3067\u304d\u308b\u304b\uff09\u300d\u3092\u6271\u3044\u307e\u3059\u304c\u3001<\/p>\n\n\n\n

OIDC\u306f\u300c\u8a8d\u8a3c\uff08\u8ab0\u306a\u306e\u304b\uff09\u300d\u3092\u6271\u3044\u307e\u3059\u3002<\/p>\n\n\n\n

\n\n\n\n

⭐ 2. OIDC \u3092\u3082\u3063\u3068\u7c21\u5358\u306b\u3044\u3046\u3068\u2026<\/strong><\/h1>\n\n\n\n

🔹 Google \u3084 Apple \u3067\u30ed\u30b0\u30a4\u30f3\u3067\u304d\u308b\u4ed5\u7d44\u307f\u306e\u571f\u53f0<\/strong><\/h3>\n\n\n\n
    \n
  • \u300cGoogle\u3067\u30ed\u30b0\u30a4\u30f3\u300d<\/li>\n\n\n\n
  • \u300cApple\u3067\u30b5\u30a4\u30f3\u30a4\u30f3\u300d<\/li>\n\n\n\n
  • \u300cLINE\u30ed\u30b0\u30a4\u30f3\u300d<\/li>\n<\/ul>\n\n\n\n

    \u3053\u308c\u3089\u306e\u591a\u304f\u306f OIDC<\/strong> \u3092\u5229\u7528\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n\n\n\n

    🔹 ID\u60c5\u5831\u3092\u5b89\u5168\u306b\u53d7\u3051\u53d6\u308b<\/strong><\/h3>\n\n\n\n

    \u30b5\u30fc\u30d3\u30b9\u5074\u306f\u30e6\u30fc\u30b6\u30fc\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u4fdd\u5b58\u3059\u308b\u5fc5\u8981\u304c\u306a\u304f\u306a\u308a\u3001<\/p>\n\n\n\n

    Google \u306a\u3069\u306e\u8a8d\u8a3c\u30d7\u30ed\u30d0\u30a4\u30c0\u30fc\u304c\u672c\u4eba\u78ba\u8a8d\u3092\u3057\u307e\u3059\u3002<\/p>\n\n\n\n

    \n\n\n\n

    ⭐ 3. OIDC \u306e\u767b\u5834\u4eba\u7269\uff08\u69cb\u6210\u8981\u7d20\uff09<\/strong><\/h1>\n\n\n\n
    \u767b\u5834\u4eba\u7269<\/strong><\/th>\u8aac\u660e<\/strong><\/th><\/tr><\/thead>
    \u30e6\u30fc\u30b6\u30fc<\/strong><\/td>\u30ed\u30b0\u30a4\u30f3\u3057\u305f\u3044\u4eba<\/td><\/tr>
    Relying Party (RP)<\/strong><\/td>\u30ed\u30b0\u30a4\u30f3\u3092\u5229\u7528\u3057\u305f\u3044\u30a2\u30d7\u30ea\uff08\u4f8b\uff1a\u3042\u306a\u305f\u306eWeb\u30b5\u30fc\u30d3\u30b9\uff09<\/td><\/tr>
    OpenID Provider (OP)<\/strong><\/td>\u8a8d\u8a3c\u3092\u884c\u3046\u5074\uff08Google \/ Microsoft Entra ID \/ Auth0\u306a\u3069\uff09<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n


    \u3042\u306a\u305f\u306e\u30a2\u30d7\u30ea\uff08RP\uff09\u304c Google\uff08OP\uff09\u306b\u201c\u3053\u306e\u4eba\u306f\u8ab0\uff1f\u201d\u3068\u805e\u304f<\/strong> \u4ed5\u7d44\u307f\u3002<\/p>\n\n\n\n

    ⭐ 4. OAuth2\u3068\u306e\u9055\u3044\uff08\u91cd\u8981\u30dd\u30a4\u30f3\u30c8\uff09<\/strong><\/h1>\n\n\n\n
    \u6bd4\u8f03\u9805\u76ee<\/strong><\/th>OAuth 2.0<\/strong><\/th>OIDC<\/strong><\/th><\/tr><\/thead>
    \u4e3b\u76ee\u7684<\/td>\u6a29\u9650\u4ed8\u4e0e\uff08\u30c7\u30fc\u30bf\u3078\u306e\u30a2\u30af\u30bb\u30b9\u8a31\u53ef\uff09<\/td>\u8a8d\u8a3c\uff08\u8ab0\u3067\u3042\u308b\u304b\uff09<\/td><\/tr>
    \u53d6\u5f97\u3067\u304d\u308b\u3082\u306e<\/td>\u30a2\u30af\u30bb\u30b9\u30c8\u30fc\u30af\u30f3<\/td>ID\u30c8\u30fc\u30af\u30f3\uff08\u30e6\u30fc\u30b6\u30fc\u60c5\u5831\uff09<\/td><\/tr>
    \u4f7f\u3044\u3069\u3053\u308d<\/td>API\u30a2\u30af\u30bb\u30b9\u3001\u6a29\u9650\u7ba1\u7406<\/td>\u30ed\u30b0\u30a4\u30f3\u3001SaaS\u8a8d\u8a3c<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

    \u3064\u307e\u308a\uff1a<\/p>\n\n\n\n

      \n
    • OAuth2\uff1a\u300c\u3053\u306e\u30e6\u30fc\u30b6\u30fc\u306e\u30e1\u30fc\u30eb\u8aad\u3080\u8a31\u53ef\u3092\u9802\u6234\u300d<\/strong><\/li>\n\n\n\n
    • OIDC\uff1a\u300c\u3053\u306e\u4eba\u304c\u8ab0\u306a\u306e\u304b\u6559\u3048\u3066\u300d<\/strong><\/li>\n<\/ul>\n\n\n\n

      ⭐ 5. OIDC \u306e\u300cID\u30c8\u30fc\u30af\u30f3\u300d\u3068\u306f\uff1f<\/strong><\/h1>\n\n\n\n

      OIDC \u306e\u4e00\u756a\u306e\u7279\u5fb4\u304c ID Token\uff08ID\u30c8\u30fc\u30af\u30f3\uff09<\/strong>\u3002<\/p>\n\n\n\n

        \n
      • JWT \u5f62\u5f0f\uff08JSON Web Token\uff09<\/li>\n\n\n\n
      • \u6539\u3056\u3093\u9632\u6b62\u306e\u7f72\u540d\u4ed8\u304d<\/li>\n\n\n\n
      • \u4e2d\u8eab\u306b\u30e6\u30fc\u30b6\u30fc\u60c5\u5831\uff08claims\uff09\u304c\u5165\u3063\u3066\u3044\u308b<\/li>\n<\/ul>\n\n\n\n
        {\n  "sub": "1234567890",\n  "email": "user@example.com",\n  "name": "Taro Yamada",\n  "iss": "https:\/\/accounts.google.com",\n  "aud": "your-app-client-id"\n}<\/code><\/pre><\/div>\n\n\n\n
        \u3053\u308c\u3092\u30a2\u30d7\u30ea\u304c\u8aad\u3080\u3053\u3068\u3067\u300c\u8ab0\u304b\u300d\u3092\u7279\u5b9a\u3067\u304d\u307e\u3059\u3002<\/strong><\/h3>\n\n\n\n
        \u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u6271\u308f\u306a\u304f\u3066\u6e08\u3080\u305f\u3081 \u8d85\u5b89\u5168<\/strong>\u3002<\/p>\n\n\n\n
        ⭐\u00a06. OIDC \u304c\u4f7f\u308f\u308c\u308b\u5834\u9762<\/strong><\/h1>\n\n\n\n
        ✔ Web\u30b5\u30fc\u30d3\u30b9\u306e\u30ed\u30b0\u30a4\u30f3<\/strong><\/h3>\n\n\n\n
          \n
        • Google \/ Apple \u30ed\u30b0\u30a4\u30f3<\/li>\n\n\n\n
        • GitHub\u30ed\u30b0\u30a4\u30f3<\/li>\n\n\n\n
        • LINE\u30ed\u30b0\u30a4\u30f3<\/li>\n<\/ul>\n\n\n\n
          ✔ \u4f01\u696d\u30b7\u30b9\u30c6\u30e0\u306eSSO\uff08Single Sign-On\uff09<\/strong><\/h3>\n\n\n\n
            \n
          • Azure AD\uff08Microsoft Entra ID\uff09<\/li>\n\n\n\n
          • Okta<\/li>\n\n\n\n
          • OneLogin<\/li>\n<\/ul>\n\n\n\n
            ✔ \u30af\u30e9\u30a6\u30c9\u306e\u8a8d\u8a3c<\/strong><\/h3>\n\n\n\n
              \n
            • AWS \u306e Identity Center<\/li>\n\n\n\n
            • GCP \u306e Identity Platform<\/li>\n\n\n\n
            • Snowflake \u306e SSO\uff08SAML or OIDC\uff09<\/li>\n<\/ul>\n\n\n\n
              \n\n\n\n
              ⭐\u00a07. \u30e1\u30ea\u30c3\u30c8<\/strong><\/h1>\n\n\n\n
                \n
              •  \u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u30a2\u30d7\u30ea\u5074\u3067\u4fdd\u6301\u3057\u306a\u304f\u3066\u3088\u3044\uff08\u30bb\u30ad\u30e5\u30a2\uff09<\/strong><\/li>\n\n\n\n
              • \u30e6\u30fc\u30b6\u30fc\u306f\u30ed\u30b0\u30a4\u30f3\u304c\u7c21\u5358<\/strong><\/li>\n\n\n\n
              • SSO\uff08\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3\uff09\u304c\u69cb\u7bc9\u3067\u304d\u308b<\/strong><\/li>\n\n\n\n
              • \u6a19\u6e96\u4ed5\u69d8\u306a\u306e\u3067\u69d8\u3005\u306a\u30b5\u30fc\u30d3\u30b9\u3068\u9023\u643a\u3057\u3084\u3059\u3044<\/strong><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
                \u30e6\u30fc\u30b6\u30fc\u8a8d\u8a3c\u3092\u5b89\u5168\u306b\u884c\u3046\u305f\u3081\u306e\u201c\u8a8d\u8a3c\u30d7\u30ed\u30c8\u30b3\u30eb\u201d \u3067\u3059\u3002 \u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u30b5\u30fc\u30d3\u30b9\u30fb\u30af\u30e9\u30a6\u30c9\u30fb\u4f01\u696d\u30b7\u30b9\u30c6\u30e0\u3067\u5e83\u304f\u4f7f\u308f\u308c\u3066\u304a\u308a\u3001 OAuth 2.0 \u3092\u30d9\u30fc\u30b9\u306b\u300c\u30ed\u30b0\u30a4\u30f3\uff08\u8a8d\u8a3c\uff09\u300d\u6a5f\u80fd\u3092\u8ffd\u52a0\u3057\u305f\u6a19\u6e96\u4ed5\u69d8\u3067\u3059\u3002 #x2b50<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jin_ogp_image_url":"","_jin_last_featured_id":0,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3187","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/agile-software.net\/index.php?rest_route=\/wp\/v2\/posts\/3187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/agile-software.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/agile-software.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/agile-software.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/agile-software.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3187"}],"version-history":[{"count":1,"href":"https:\/\/agile-software.net\/index.php?rest_route=\/wp\/v2\/posts\/3187\/revisions"}],"predecessor-version":[{"id":3188,"href":"https:\/\/agile-software.net\/index.php?rest_route=\/wp\/v2\/posts\/3187\/revisions\/3188"}],"wp:attachment":[{"href":"https:\/\/agile-software.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3187"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/agile-software.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3187"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/agile-software.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}