SAMLã«ããSSO: Azure
éå§ããåã«
ã¢ããªã±ãŒã·ã§ã³å ã®ãã£ãããŸãã¯[email protected]ããmablãµããŒãã«é£çµ¡ããŠãSAMLã»ããã¢ããããã»ã¹ãéå§ããŸããã»ããã¢ãããå®äºããã«ã¯ããµããŒãããæäŸãããå¿çURLãšãªãŒãã£ãšã³ã¹ã®å€ãå¿ èŠã«ãªããŸãããŸããIDãããã€ããŒãšããŠAzureã䜿çšããŠããããšããµããŒãã«äŒããŠãã ããã
ããã§ã¯ãmabl SSOã€ã³ãã°ã¬ãŒã·ã§ã³ã®äŸãšããŠãAzureã䜿çšããSAMLã»ããã¢ããããã»ã¹ã®æŠèŠã説æããŸããããã¯ãåæ§ã®ã»ããã¢ãããè¡ãä»ã®SAML IDãããã€ããŒã§ãåäœããã¯ãã§ããOktaã䜿çšããŠããå Žåã¯ã代ããã« ãSAMLã«ããSSOã®äŸ (Okta)ããã芧ãã ããã
- Azureå ã§ã[Azure Active Directory] > [ãšã³ã¿ãŒãã©ã€ãº ã¢ããªã±ãŒã·ã§ã³] ã«ç§»åããŸãã
- 次ã«ã[+ æ°ããã¢ããªã±ãŒã·ã§ã³] ãéžæããŸãã
- 次ã«ã[+ ç¬èªã®ã¢ããªã±ãŒã·ã§ã³ã®äœæ] ãéžæããŸãã
- [ã®ã£ã©ãªãŒä»¥å€ã®ã¢ããªã±ãŒã·ã§ã³] ãéžæããŸãã
- ã¢ããªã±ãŒã·ã§ã³ã«ååãä»ããŠã[äœæ] ãã¯ãªãã¯ããŸãã

ã¢ããªã±ãŒã·ã§ã³ã®è¿œå
次ã«è¡šç€ºãããã¡ãã¥ãŒã§ã以äžã®æäœãå®è¡ããŸãã
- [ã·ã³ã°ã« ãµã€ã³ãªã³] ãéžæããŸãã
- [SAML] ãéžæããŸãã

èšå®äŸ
åºæ¬çãªSAMLæ§æ
- èå¥å (ãšã³ãã£ãã£ID): mablãµããŒããæäŸ
- å¿çURL (Assertion Consumer Service URL): mablãµããŒããæäŸ
- ãµã€ã³ãªã³URL: çç¥å¯èœ
- ãªã¬ãŒç¶æ : çç¥å¯èœ
- ãã°ã¢ãŠãURL: çç¥å¯èœ
ãŠãŒã¶ãŒå±æ§ãšã¯ã¬ãŒã
Azureã«ãã£ãŠã以äžã®ããã©ã«ãã®ãŠãŒã¶ãŒå±æ§ãšã¯ã¬ãŒã ãèªåçã«å
¥åãããã¯ãã§ãã
- givenname:
user.givenname
- surname:
user.surname
- emailaddress:
user.mail
- name:
user.userprincipalname
- äžæã®ãŠãŒã¶ãŒID:
user.mail
次ã®ã¹ããã
ãã¹ãŠä¿åããŸãã
以äžã®æ å ±ãmablãµããŒãã«æž¡ããŸã¹ã
ã¢ããªã±ãŒã·ã§ã³ã®ãã§ãã¬ãŒã·ã§ã³ã¡ã¿ããŒã¿URL
èšŒææž (æªå å·¥)
ãã§ãã¬ãŒã·ã§ã³ã¡ã¿ããŒã¿XML
ãã°ã€ã³URL
Azure ADèå¥å
X.509èšŒææžã®ã»ãã¥ãªãã£
ããã¯å ¬ééµèšŒææžã§ããã€ãŸãããã®èšŒææžãéåžžã®ãã£ãã«ãä»ããŠmablã«æž¡ããŠããã»ãã¥ãªãã£äžã®ãªã¹ã¯ããªãããšãæå³ããŸãã
mablãã°ã€ã³ã®ãã¡ã€ã³å¶é
èšå®ãå®äºãããšãæå®ãããå®å šä¿®é£Ÿãã¡ã€ã³å (mail.company.comãªã©) ã䜿çšããŠãµã€ã³ã¢ããããããšãããŠãŒã¶ãŒã¯ãæå®ãããSAMLãããã€ããŒããçºä¿¡ããããšãèŠæ±ãããŸãã
远å ã®ã¡ãŒã«ãã¡ã€ã³
ã¯ãŒã¯ã¹ããŒã¹ã«è¿œå ã®ãã¡ã€ã³ãããå Žåãããšãã°ãã¡ã€ã³ã®æ¥ç¶ã¯[email protected]ã§è¡ãããã¯ãŒã¯ã¹ããŒã¹ã«ã¯[email protected]ã§ãã°ã€ã³ãããŠãŒã¶ãŒãããå ŽåãSAMLæ¥ç¶ãèšå®ããéã«ãµããŒãããŒã ã«ãç¥ããããã ããã°ãmablã§ãããã®ãã¡ã€ã³ããã¡ã€ã³ããã¯ã«è¿œå ã§ããŸãã远å ã®ãã¡ã€ã³ããã¹ãŠãã¡ã€ã³ããã¯ã«å«ãŸããŸããäŒç€Ÿãå®å šã«ææããŠãããã¡ã€ã³ã®ã¿ã䜿çšã§ããŸãã
mablããã®æ å ±ãååŸããSAMLã¢ããªã±ãŒã·ã§ã³ãžã®å¿ èŠãªæ¥ç¶ãèšå®ãããšãçµç¹ã¯ä»»æã®IDãããã€ããŒãä»ããŠãã°ã€ã³ããã¢ã¯ã»ã¹ãå¶éã§ããããã«ãªããŸãã
Updated about 1 year ago