OAuth 2.0 #idit2012

•

1 gefällt mir•1,025 views

Nov Matake

Technologie Business

@nov

OpenID Foundation Japan Evangelist
OAuth.jp
Ruby Libraries
rack-oauth2
openid_connect
fb_graph

ID＆IT Management Conference 2012

Current Trend

Mobile Game Social

ID＆IT Management Conference 2012

Platform ♥ 3rd-party Developers

ID＆IT Management Conference 2012

API Integration

Access Control for APIs

ID＆IT Management Conference 2012

OAuth

No password sharing
Limited access lifetime
Expire a'er N weeks
Limited access scope
Status Update : OK
Read Inbox : NG

ID＆IT Management Conference 2012

OAuth 2.0 in Enterprize

ID＆IT Management Conference 2012

Authorization
Server
Authorize
Client Access
Access
Token
Resource
Server
Resource
Owner API
Client
Access

ID＆IT Management Conference 2012

Get Access Token

2 Response Types in Core
Code
Token
Extensions
Code + Token
and more..

ID＆IT Management Conference 2012

response_type = code
Resource Owner Client Authorization Server

Initiate

Require Approval

Approve

Code

Code
Access Token
ID＆IT Management Conference 2012

response_type = token
Resource Owner Client Authorization Server

Initiate

Require Approval

Approve

Access Token

ID＆IT Management Conference 2012

Response Type
Code Token
Secure Eﬃcient
2 HTTP request 1 HTTP request
Require Approval Both at once
Get Access Token

+ extensions
ID＆IT Management Conference 2012

♥
OpenID Connect
~ OpenID based on OAuth 2.0 ~
ID＆IT Management Conference 2012

So, why these matters?

ID＆IT Management Conference 2012

API Economy
ID＆IT Management Conference 2012

Applications
People
Streams
Access Control
Identity
Discovery
ID＆IT Management Conference 2012

デジタルアイデンティティ技術最新動向 - @IT

ID＆IT Management Conference 2012

twitter.com/nov

slideshare.net/matake

github.com/nov

openid-foundation-japan.github.com

ID＆IT Management Conference 2012

Weitere ähnliche Inhalte

Was ist angesagt?

Single Sign On with OAuth and OpenIDGasperi Jerome

OpenID Connect: The new standard for connecting to your Customers, Partners, ...Salesforce Developers

Smart Card AuthenticationDan Usher

Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)Richard Bullington-McGuire

Understanding OpenIDPrabath Siriwardena

CIS14: Consolidating Authorization for API and Web SSO using OpenID ConnectCloudIDSummit

Authorization The Missing Piece of the PuzzleNordic APIs

Integrated social solutions, the power and pitfalls of mashupsNordic APIs

Authentication & Authorization for Connected Mobile & Web Applications using ...Amazon Web Services

Securing online services by combining smart cards and web-based applicationsOlivier Potonniée

Mit 2014 introduction to open id connect and o-auth 2Justin Richer

Authentication and Identity with Amazon CognitoAmazon Web Services

Authentication through Claims-Based Authenticationijtsrd

Internet of Things presentationDeep Shah

OpenID Connect: An OverviewPat Patterson

OpenID Connect and Single Sign-On for BeginnersSalesforce Developers

Cloud Native Journey in Synchrony FinancialVMware Tanzu

Deep Dive on Amazon Cognito - DevDay Austin 2017Amazon Web Services

Stateless Auth using OAUTH2 & JWTMobiliya

Auth experience - vol 1.0Haggai Philip Zagury

Was ist angesagt? (20)

Single Sign On with OAuth and OpenID

OpenID Connect: The new standard for connecting to your Customers, Partners, ...

Smart Card Authentication

Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)

Understanding OpenID

CIS14: Consolidating Authorization for API and Web SSO using OpenID Connect

Authorization The Missing Piece of the Puzzle

Integrated social solutions, the power and pitfalls of mashups

Authentication & Authorization for Connected Mobile & Web Applications using ...

Securing online services by combining smart cards and web-based applications

Mit 2014 introduction to open id connect and o-auth 2

Authentication and Identity with Amazon Cognito

Authentication through Claims-Based Authentication

Internet of Things presentation

OpenID Connect: An Overview

OpenID Connect and Single Sign-On for Beginners

Cloud Native Journey in Synchrony Financial

Deep Dive on Amazon Cognito - DevDay Austin 2017

Stateless Auth using OAUTH2 & JWT

Auth experience - vol 1.0

Andere mochten auch

Whats wrong oauth_authnNov Matake

IIW 16th Report at #idconNov Matake

OAuth認証再考からのOpenID Connect #devloveNov Matake

池澤あやかと学ぼう！: はじめてのOAuthとOpenID Connect - JICS 2014Nov Matake

OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016Nov Matake

API提供におけるOAuthの役割 #apijpTatsuo Kudo

OpenID Connect 101 @ OpenID TechNight vol.11Nov Matake

デブサミ2017 【DevBooks】即売会サークル参加要項Developers Summit

デブサミ2017 公募セッション募集要項Developers Summit

Andere mochten auch (9)

Whats wrong oauth_authn

IIW 16th Report at #idcon

OAuth認証再考からのOpenID Connect #devlove

池澤あやかと学ぼう！: はじめてのOAuthとOpenID Connect - JICS 2014

OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016

API提供におけるOAuthの役割 #apijp

OpenID Connect 101 @ OpenID TechNight vol.11

デブサミ2017 【DevBooks】即売会サークル参加要項

デブサミ2017 公募セッション募集要項

Ähnlich wie OAuth 2.0 #idit2012

OAuth 2.0 Updates #technightNov Matake

OAuth 2.0 Updates #technight in OsakaNov Matake

[WSO2Con USA 2018] Identity APIs is the New BlackWSO2

CIS 2015 Extreme OAuth - Paul MeyerCloudIDSummit

[WSO2Con EU 2018] Identity APIs is the New BlackWSO2

2022 APIsecure_Why Assertion-based Access Token is preferred to Handle-based ...APIsecure_ Official

O auth2.0 20141003Syed Ali Raza

Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)Codit

4. tmg 2010 e uag 2010Fabrizio Volpe

CIS14: Lean In: Enterprise Cloud IdentityCloudIDSummit

Who’s Knocking? Identity for APIs, Web and MobileNordic APIs

Enterprise Access Control Patterns for Rest and Web APIsCA API Management

Building an Effective Identity Management StrategyNetIQ

OAuth 101 & Secure APIs 2012 Cloud Identity SummitBrian Campbell

Open Source Identity ManagementRadovan Semancik

Synergies of Cloud Identity: Putting it All TogetherTwobo Technologies

Identity soupDavid Waite

API Security with OAuth2.0.Kellton Tech Solutions Ltd

Azure AD B2C An Introduction - DogFoodCon 2018Jeremy Gray

Microsoft Graph API Delegated PermissionsStefan Weber

Ähnlich wie OAuth 2.0 #idit2012 (20)

OAuth 2.0 Updates #technight

OAuth 2.0 Updates #technight in Osaka

[WSO2Con USA 2018] Identity APIs is the New Black

CIS 2015 Extreme OAuth - Paul Meyer

[WSO2Con EU 2018] Identity APIs is the New Black

2022 APIsecure_Why Assertion-based Access Token is preferred to Handle-based ...

O auth2.0 20141003

Enable Oauth2.0 with Sentinet API Management (Massimo Crippa @ BTUG Event)

4. tmg 2010 e uag 2010

CIS14: Lean In: Enterprise Cloud Identity

Who’s Knocking? Identity for APIs, Web and Mobile

Enterprise Access Control Patterns for Rest and Web APIs

Building an Effective Identity Management Strategy

OAuth 101 & Secure APIs 2012 Cloud Identity Summit

Open Source Identity Management

Synergies of Cloud Identity: Putting it All Together

Identity soup

API Security with OAuth2.0.

Azure AD B2C An Introduction - DogFoodCon 2018

Microsoft Graph API Delegated Permissions

Mehr von Nov Matake

#idcon vol.29 - #fidcon WebAuthn, Next StageNov Matake

FedCM - OpenID TechNight vol.19Nov Matake

Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...Nov Matake

FIDO @ LINE - #idcon vol.24Nov Matake

W3C Web Authentication - #idcon vol.24Nov Matake

NIST SP 800-63C - Federation and Assertions (FINAL)Nov Matake

NIST SP 800-63C #idcon vol.22Nov Matake

NIST SP 800-63-3 #idcon vol.22Nov Matake

ID連携入門 (実習編) - Security Camp 2016Nov Matake

ID連携概要 - OpenID TechNight vol.13Nov Matake

ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idconNov Matake

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014Nov Matake

FIDO alliance #idcon vol.18Nov Matake

ID & IT 2013 - OpenID Connect Hands-onNov Matake

JWT Translation #technightNov Matake

MIT-KIT Intro at #idcon satteliteNov Matake

Self isssued-idpNov Matake

Account Chooser #idit2012Nov Matake

諸外国の国民ID制度 #idcon 13thNov Matake

Mehr von Nov Matake (20)

#idcon vol.29 - #fidcon WebAuthn, Next Stage

FedCM - OpenID TechNight vol.19

Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...

FIDO @ LINE - #idcon vol.24

W3C Web Authentication - #idcon vol.24

NIST SP 800-63C - Federation and Assertions (FINAL)

NIST SP 800-63C #idcon vol.22

NIST SP 800-63-3 #idcon vol.22

ID連携入門 (実習編) - Security Camp 2016

ID連携概要 - OpenID TechNight vol.13

ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idcon

SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014

FIDO alliance #idcon vol.18

ID & IT 2013 - OpenID Connect Hands-on

JWT Translation #technight

MIT-KIT Intro at #idcon sattelite

Self isssued-idp

Account Chooser #idit2012

諸外国の国民ID制度 #idcon 13th

Kürzlich hochgeladen

Real Time Object Detection Using Open CVKhem

Apidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbuapidays

Automating Google Workspace (GWS) & more with Apps Scriptwesley chun

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWERMadyBayot

Manulife - Insurer Transformation Award 2024The Digital Insurer

MS Copilot expands with MS Graph connectorsNanddeep Nachan

Apidays New York 2024 - The value of a flexible API Management solution for O...apidays

Apidays Singapore 2024 - Scalable LLM APIs for AI and Generative AI Applicati...apidays

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...Jeffrey Haguewood

Axa Assurance Maroc - Insurer Innovation Award 2024The Digital Insurer

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost SavingEdi Saputra

Data Cloud, More than a CDP by Matt RobisonAnna Loughnan Colquhoun

Architecting Cloud Native ApplicationsWSO2

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...apidays

presentation ICT roal in 21st century educationjfdjdjcjdnsjd

FWD Group - Insurer Innovation Award 2024The Digital Insurer

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobeapidays

Powerful Google developer tools for immediate impact! (2023-24 C)wesley chun

Ransomware_Q4_2023. The report. [EN].pdfOverkill Security

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...Miguel Araújo

Kürzlich hochgeladen (20)

Real Time Object Detection Using Open CV

Apidays Singapore 2024 - Modernizing Securities Finance by Madhu Subbu

Automating Google Workspace (GWS) & more with Apps Script

EMPOWERMENT TECHNOLOGY GRADE 11 QUARTER 2 REVIEWER

Manulife - Insurer Transformation Award 2024

MS Copilot expands with MS Graph connectors

Apidays New York 2024 - The value of a flexible API Management solution for O...

Apidays Singapore 2024 - Scalable LLM APIs for AI and Generative AI Applicati...

Web Form Automation for Bonterra Impact Management (fka Social Solutions Apri...

Axa Assurance Maroc - Insurer Innovation Award 2024

Repurposing LNG terminals for Hydrogen Ammonia: Feasibility and Cost Saving

Data Cloud, More than a CDP by Matt Robison

Architecting Cloud Native Applications

Apidays New York 2024 - Accelerating FinTech Innovation by Vasa Krishnan, Fin...

presentation ICT roal in 21st century education

FWD Group - Insurer Innovation Award 2024

Apidays New York 2024 - Scaling API-first by Ian Reasor and Radu Cotescu, Adobe

Powerful Google developer tools for immediate impact! (2023-24 C)

Ransomware_Q4_2023. The report. [EN].pdf

Mastering MySQL Database Architecture: Deep Dive into MySQL Shell and MySQL R...

OAuth 2.0 #idit2012

1. OAuth 2.0

2. @nov OpenID Foundation Japan Evangelist OAuth.jp Ruby Libraries rack-oauth2 openid_connect fb_graph ID＆IT Management Conference 2012

3. ID＆IT Management Conference 2012

4. Current Trend Mobile Game Social ID＆IT Management Conference 2012

5. Platform ♥ 3rd-party Developers ID＆IT Management Conference 2012

6. API Integration Access Control for APIs ID＆IT Management Conference 2012

7. OAuth No password sharing Limited access lifetime Expire a'er N weeks Limited access scope Status Update : OK Read Inbox : NG ID＆IT Management Conference 2012

8. OAuth 2.0 in Enterprize ID＆IT Management Conference 2012

9. ID＆IT Management Conference 2012

10. Authorization Server Authorize Client Access Access Token Resource Server Resource Owner API Client Access ID＆IT Management Conference 2012

11. Authorization Server Authorize Client Access Access Token Resource Server Resource Owner API Client Access ID＆IT Management Conference 2012

12. Authorization Server Authorize Client Access Access Token Resource Server Resource Owner API Client Access ID＆IT Management Conference 2012

13. Get Access Token 2 Response Types in Core Code Token Extensions Code + Token and more.. ID＆IT Management Conference 2012

14. response_type = code Resource Owner Client Authorization Server Initiate Require Approval Approve Code Code Access Token ID＆IT Management Conference 2012

15. response_type = token Resource Owner Client Authorization Server Initiate Require Approval Approve Access Token ID＆IT Management Conference 2012

16. Response Type Code Token Secure Eﬃcient 2 HTTP request 1 HTTP request Require Approval Both at once Get Access Token + extensions ID＆IT Management Conference 2012

17. ♥ OpenID Connect ~ OpenID based on OAuth 2.0 ~ ID＆IT Management Conference 2012

18. ID＆IT Management Conference 2012

19. So, why these matters? ID＆IT Management Conference 2012

20. Social ID＆IT Management Conference 2012

21. Cloud ID＆IT Management Conference 2012

22. API Economy ID＆IT Management Conference 2012

23. Applications People Streams Access Control Identity Discovery ID＆IT Management Conference 2012

24. デジタルアイデンティティ技術最新動向 - @IT ID＆IT Management Conference 2012

25. twitter.com/nov slideshare.net/matake github.com/nov openid-foundation-japan.github.com ID＆IT Management Conference 2012

OAuth 2.0 #idit2012

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (9)

Ähnlich wie OAuth 2.0 #idit2012

Ähnlich wie OAuth 2.0 #idit2012 (20)

Mehr von Nov Matake

Mehr von Nov Matake (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

OAuth 2.0 #idit2012