SlideShare a Scribd company logo
OAuth 2.0
@nov

OpenID Foundation Japan Evangelist
OAuth.jp
Ruby Libraries
  rack-oauth2
  openid_connect
  fb_graph

                             ID&IT Management Conference 2012
ID&IT Management Conference 2012
Current Trend

Mobile       Game                 Social




                    ID&IT Management Conference 2012
Platform ♥ 3rd-party Developers

                   ID&IT Management Conference 2012
API Integration



Access Control for APIs

               ID&IT Management Conference 2012
OAuth

No password sharing
Limited access lifetime
  Expire a'er N weeks
Limited access scope
  Status Update : OK
  Read Inbox : NG

                          ID&IT Management Conference 2012
OAuth 2.0 in Enterprize




              ID&IT Management Conference 2012
ID&IT Management Conference 2012
Authorization
                                             Server
 Authorize
Client Access
                         Access
                         Token
                                             Resource
                                               Server
Resource
 Owner                    API
                Client
                         Access


                            ID&IT Management Conference 2012
Authorization
                                             Server
 Authorize
Client Access
                         Access
                         Token
                                             Resource
                                               Server
Resource
 Owner                    API
                Client
                         Access


                            ID&IT Management Conference 2012
Authorization
                                             Server
 Authorize
Client Access
                         Access
                         Token
                                             Resource
                                               Server
Resource
 Owner                    API
                Client
                         Access


                            ID&IT Management Conference 2012
Get Access Token

2 Response Types in Core
  Code
  Token
Extensions
  Code + Token
  and more..

                           ID&IT Management Conference 2012
response_type = code
Resource Owner                Client             Authorization Server


                 Initiate

           Require Approval

                 Approve

                                            Code

                                            Code
                                        Access Token
                                       ID&IT Management Conference 2012
response_type = token
Resource Owner                Client             Authorization Server


                 Initiate


           Require Approval


                 Approve


             Access Token


                                       ID&IT Management Conference 2012
Response Type
Code                  Token
 Secure                Efficient
 2 HTTP request        1 HTTP request
   Require Approval       Both at once
   Get Access Token



                                   + extensions
                      ID&IT Management Conference 2012
♥
   OpenID Connect
~ OpenID based on OAuth 2.0 ~
                  ID&IT Management Conference 2012
ID&IT Management Conference 2012
So, why these matters?



              ID&IT Management Conference 2012
Social
     ID&IT Management Conference 2012
Cloud
    ID&IT Management Conference 2012
API Economy
       ID&IT Management Conference 2012
Applications
People
Streams
Access Control
Identity
Discovery
                 ID&IT Management Conference 2012
デジタルアイデンティティ技術最新動向 - @IT




              ID&IT Management Conference 2012
twitter.com/nov



slideshare.net/matake



github.com/nov



openid-foundation-japan.github.com

                  ID&IT Management Conference 2012

More Related Content

PDF
OpenID Connect Explained
PDF
OAuth 2.0 and OpenID Connect
PDF
OAuth 2.0 & OpenID Connect @ OpenSource Conference 2011 Tokyo #osc11tk
PDF
GHC18 Abstract - API Security, a Grail Quest
PDF
OpenID Connect vs. OpenID 1 & 2
PDF
Incorporating OAuth: How to integrate OAuth into your mobile app
PPTX
Why Assertion-based Access Token is preferred to Handle-based one?
PDF
Launching a Successful and Secure API
OpenID Connect Explained
OAuth 2.0 and OpenID Connect
OAuth 2.0 & OpenID Connect @ OpenSource Conference 2011 Tokyo #osc11tk
GHC18 Abstract - API Security, a Grail Quest
OpenID Connect vs. OpenID 1 & 2
Incorporating OAuth: How to integrate OAuth into your mobile app
Why Assertion-based Access Token is preferred to Handle-based one?
Launching a Successful and Secure API

What's hot (18)

PDF
Single Sign On with OAuth and OpenID
PDF
OpenID Connect: The new standard for connecting to your Customers, Partners, ...
PPTX
Smart Card Authentication
PPTX
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
PPT
Understanding OpenID
PDF
CIS14: Consolidating Authorization for API and Web SSO using OpenID Connect
PDF
Authorization The Missing Piece of the Puzzle
PDF
Integrated social solutions, the power and pitfalls of mashups
PPTX
Securing online services by combining smart cards and web-based applications
PPTX
Mit 2014 introduction to open id connect and o-auth 2
PDF
Authentication through Claims-Based Authentication
PPTX
Internet of Things presentation
PPTX
OpenID Connect: An Overview
PPTX
OpenID Connect and Single Sign-On for Beginners
PPTX
Cloud Native Journey in Synchrony Financial
PDF
Stateless Auth using OAUTH2 & JWT
PDF
Auth experience - vol 1.0
PPTX
Identity Summit 2015: EnerNOC Case Study: The Transformation of IAM for EnerN...
Single Sign On with OAuth and OpenID
OpenID Connect: The new standard for connecting to your Customers, Partners, ...
Smart Card Authentication
Enabling Web Apps For DoD Security via PKI/CAC Enablement (Forge.Mil case study)
Understanding OpenID
CIS14: Consolidating Authorization for API and Web SSO using OpenID Connect
Authorization The Missing Piece of the Puzzle
Integrated social solutions, the power and pitfalls of mashups
Securing online services by combining smart cards and web-based applications
Mit 2014 introduction to open id connect and o-auth 2
Authentication through Claims-Based Authentication
Internet of Things presentation
OpenID Connect: An Overview
OpenID Connect and Single Sign-On for Beginners
Cloud Native Journey in Synchrony Financial
Stateless Auth using OAUTH2 & JWT
Auth experience - vol 1.0
Identity Summit 2015: EnerNOC Case Study: The Transformation of IAM for EnerN...
Ad

Viewers also liked (9)

PDF
Whats wrong oauth_authn
PDF
IIW 16th Report at #idcon
PDF
OAuth認証再考からのOpenID Connect #devlove
PDF
池澤あやかと学ぼう!: はじめてのOAuthとOpenID Connect - JICS 2014
PDF
OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016
PDF
API提供におけるOAuthの役割 #apijp
PDF
OpenID Connect 101 @ OpenID TechNight vol.11
PDF
デブサミ2017 【DevBooks】即売会サークル参加要項
PDF
デブサミ2017 公募セッション募集要項
Whats wrong oauth_authn
IIW 16th Report at #idcon
OAuth認証再考からのOpenID Connect #devlove
池澤あやかと学ぼう!: はじめてのOAuthとOpenID Connect - JICS 2014
OPTiM StoreにおけるSCIM & OIDC活用事例 - ID&IT 2016
API提供におけるOAuthの役割 #apijp
OpenID Connect 101 @ OpenID TechNight vol.11
デブサミ2017 【DevBooks】即売会サークル参加要項
デブサミ2017 公募セッション募集要項
Ad

Similar to OAuth 2.0 #idit2012 (20)

PDF
OAuth 2.0 Updates #technight
PDF
OAuth 2.0 Updates #technight in Osaka
PDF
WSO2 Identity Server
PPTX
Identity Management: Using OIDC to Empower the Next-Generation Apps
PPTX
Authentication Server
PDF
Hitachi ID Identity Manager: Faster onboarding, reliable deactivation and eff...
PDF
Open sso fisl9.0
PPTX
Leveraging Identity to Manage Change and Complexity
PPT
Oauth tutorial
PPTX
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...
PDF
New Trends in Web Security
PPTX
Enterprise Access Control Patterns for Rest and Web APIs
PDF
Open Source Identity Integration with OpenSSO
PDF
Enable Secure Mobile & Web Access to Microsoft SharePoint
PPTX
OAuth 2.0 and Mobile Devices: Is that a token in your phone in your pocket or...
PDF
OAuth in the Real World featuring Webshell
PPTX
OAuth 101 & Secure APIs 2012 Cloud Identity Summit
PPTX
Making Sense of API Access Control
PDF
Analyzing OAuth
PPT
Building an Effective Identity Management Strategy
OAuth 2.0 Updates #technight
OAuth 2.0 Updates #technight in Osaka
WSO2 Identity Server
Identity Management: Using OIDC to Empower the Next-Generation Apps
Authentication Server
Hitachi ID Identity Manager: Faster onboarding, reliable deactivation and eff...
Open sso fisl9.0
Leveraging Identity to Manage Change and Complexity
Oauth tutorial
Enterprise Access Control Patterns for REST and Web APIs Gluecon 2011, Franco...
New Trends in Web Security
Enterprise Access Control Patterns for Rest and Web APIs
Open Source Identity Integration with OpenSSO
Enable Secure Mobile & Web Access to Microsoft SharePoint
OAuth 2.0 and Mobile Devices: Is that a token in your phone in your pocket or...
OAuth in the Real World featuring Webshell
OAuth 101 & Secure APIs 2012 Cloud Identity Summit
Making Sense of API Access Control
Analyzing OAuth
Building an Effective Identity Management Strategy

More from Nov Matake (20)

PDF
#idcon vol.29 - #fidcon WebAuthn, Next Stage
PDF
FedCM - OpenID TechNight vol.19
PDF
Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...
PDF
Sign in with Apple
PDF
FIDO @ LINE - #idcon vol.24
PDF
W3C Web Authentication - #idcon vol.24
PDF
NIST SP 800-63C - Federation and Assertions (FINAL)
PDF
NIST SP 800-63C #idcon vol.22
PDF
NIST SP 800-63-3 #idcon vol.22
PDF
ID連携入門 (実習編) - Security Camp 2016
PDF
ID連携概要 - OpenID TechNight vol.13
PDF
ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idcon
PDF
SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014
PDF
FIDO alliance #idcon vol.18
PDF
ID & IT 2013 - OpenID Connect Hands-on
PDF
JWT Translation #technight
PDF
MIT-KIT Intro at #idcon sattelite
PDF
Self isssued-idp
PDF
Account Chooser #idit2012
PPTX
諸外国の国民ID制度 #idcon 13th
#idcon vol.29 - #fidcon WebAuthn, Next Stage
FedCM - OpenID TechNight vol.19
Safari (ITP) & Chrome (SameSite=Lax as default) が Federation に与える影響 - OpenID ...
Sign in with Apple
FIDO @ LINE - #idcon vol.24
W3C Web Authentication - #idcon vol.24
NIST SP 800-63C - Federation and Assertions (FINAL)
NIST SP 800-63C #idcon vol.22
NIST SP 800-63-3 #idcon vol.22
ID連携入門 (実習編) - Security Camp 2016
ID連携概要 - OpenID TechNight vol.13
ミスコンとプライバシー ~ IdentityDuck誕生秘話 ~ #idcon
SAML / OpenID Connect / OAuth / SCIM 技術解説 - ID&IT 2014 #idit2014
FIDO alliance #idcon vol.18
ID & IT 2013 - OpenID Connect Hands-on
JWT Translation #technight
MIT-KIT Intro at #idcon sattelite
Self isssued-idp
Account Chooser #idit2012
諸外国の国民ID制度 #idcon 13th

Recently uploaded (20)

PDF
Encapsulation_ Review paper, used for researhc scholars
PDF
cuic standard and advanced reporting.pdf
PDF
Unlocking AI with Model Context Protocol (MCP)
PDF
Review of recent advances in non-invasive hemoglobin estimation
PDF
CIFDAQ's Market Insight: SEC Turns Pro Crypto
PPTX
Understanding_Digital_Forensics_Presentation.pptx
PPTX
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
PDF
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
PDF
Chapter 3 Spatial Domain Image Processing.pdf
PDF
Per capita expenditure prediction using model stacking based on satellite ima...
PDF
Encapsulation theory and applications.pdf
PDF
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
PDF
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
PDF
Dropbox Q2 2025 Financial Results & Investor Presentation
PDF
Agricultural_Statistics_at_a_Glance_2022_0.pdf
PPTX
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
PDF
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
PPT
Teaching material agriculture food technology
PDF
Mobile App Security Testing_ A Comprehensive Guide.pdf
PDF
Reach Out and Touch Someone: Haptics and Empathic Computing
Encapsulation_ Review paper, used for researhc scholars
cuic standard and advanced reporting.pdf
Unlocking AI with Model Context Protocol (MCP)
Review of recent advances in non-invasive hemoglobin estimation
CIFDAQ's Market Insight: SEC Turns Pro Crypto
Understanding_Digital_Forensics_Presentation.pptx
PA Analog/Digital System: The Backbone of Modern Surveillance and Communication
7 ChatGPT Prompts to Help You Define Your Ideal Customer Profile.pdf
Chapter 3 Spatial Domain Image Processing.pdf
Per capita expenditure prediction using model stacking based on satellite ima...
Encapsulation theory and applications.pdf
TokAI - TikTok AI Agent : The First AI Application That Analyzes 10,000+ Vira...
Build a system with the filesystem maintained by OSTree @ COSCUP 2025
Dropbox Q2 2025 Financial Results & Investor Presentation
Agricultural_Statistics_at_a_Glance_2022_0.pdf
VMware vSphere Foundation How to Sell Presentation-Ver1.4-2-14-2024.pptx
Blue Purple Modern Animated Computer Science Presentation.pdf.pdf
Teaching material agriculture food technology
Mobile App Security Testing_ A Comprehensive Guide.pdf
Reach Out and Touch Someone: Haptics and Empathic Computing

OAuth 2.0 #idit2012