ãã®æä½ãè¡ãã«ã¯ãç¹æ¨©ç®¡çè ã¨ãã¦ãã°ã¤ã³ããå¿ è¦ãããã¾ãã
SAMLï¼Security Assertion Markup Languageï¼ãå©ç¨ãã¦ãGoogle Cloud ã®èªè¨¼æ å ±ã§ä¼æ¥åãã¯ã©ã¦ã ã¢ããªã±ã¼ã·ã§ã³ã«ãã°ã¤ã³ã§ãã¾ãã
Salesforce ç¨ã« SAML çµç±ã§ã® SSO ãè¨å®ãã
Salesforce ã¢ããªã±ã¼ã·ã§ã³ç¨ã« SAML çµç±ã§ã®ã·ã³ã°ã« ãµã¤ã³ãªã³ï¼SSOï¼ãè¨å®ããæ¹æ³ã¯ã次ã®ã¨ããã§ãã
注: SSO ãè¨å®ããåã«ãSalesforce ãµããã¡ã¤ã³ãè¨å®ãã¦ãã ããã
æé 1: Google ã SAML ID ãããã¤ãï¼IdPï¼ã¨ãã¦è¨å®ãã-
Google 管çã³ã³ã½ã¼ã«ã«ãã°ã¤ã³ãã¾ãã
ç¹æ¨©ç®¡çè 権éã®ããã¢ã«ã¦ã³ãï¼æ«å°¾ã @gmail.com ã§ãªããã®ï¼ã§ãã°ã¤ã³ãã¦ãã ããã
-
管çã³ã³ã½ã¼ã«ã§ãã¡ãã¥ã¼ ã¢ã¤ã³ã³ [ã¢ããª] [ã¦ã§ãã¢ããªã¨ã¢ãã¤ã«ã¢ããª] ã«ã¢ã¯ã»ã¹ãã¾ãã
-
[ã¢ããªã追å ] [ã¢ããªãæ¤ç´¢] ãã¯ãªãã¯ãã¾ãã
- æ¤ç´¢æ¬ã«ãSalesforceãã¨å ¥åãã¾ãã
- æ¤ç´¢çµæã§ãSalesforce SAML ã¢ããªã±ã¼ã·ã§ã³ã«ã«ã¼ã½ã«ãåããã[é¸æ] ãã¯ãªãã¯ãã¾ãã
- [Google ID ãããã¤ãã®è©³ç´°] ãã¼ã¸ã§ã次ã®æä½ãè¡ãã¾ãã
- [SSO ã® URL] 㨠[ã¨ã³ãã£ã㣠ID] ã®å¤ãã³ãã¼ãã¦ä¿åãã¾ãã
- [証ææ¸] ã®ãã¡ã¤ã«ããã¦ã³ãã¼ããã¾ãã
- [次ã¸] ãã¯ãªãã¯ãã¾ãã
- [ãµã¼ãã¹ ãããã¤ãã®è©³ç´°] ã§æ¬¡ã®æä½ãè¡ãã¾ãã
- [ACS ã® URL] æ¬ã§ãhttps://{domain specific}.my.salesforce.com ã® {domain specific} ãå®éã® Salesforce ãµããã¡ã¤ã³ã«ç½®ãæãã¾ãã
- [ã¨ã³ãã£ã㣠ID] æ¬ã¨ [éå§ URL] æ¬ã§ã{domain specific} ãå®éã® Salesforce ãµããã¡ã¤ã³ã«ç½®ãæãã¾ãã
- [ç¶è¡] ãã¯ãªãã¯ãã¾ãã
- ï¼çç¥å¯ï¼Google ãã£ã¬ã¯ããªã®å±æ§ã対å¿ããã¢ããªã®å±æ§ã«ãããã³ã°ããã«ã¯ã[å±æ§ã®ãããã³ã°] ã¦ã£ã³ãã¦ã§æ¬¡ã®æä½ãè¡ãã¾ãã
- [ãããã³ã°ã追å ] ãã¯ãªãã¯ãã¾ãã
- [ãã£ã¼ã«ããé¸æ] ãã¯ãªã㯠Google ãã£ã¬ã¯ããªã®å±æ§ãé¸æãã¾ãã
- [ã¢ããªå±æ§] ã«ã対å¿ããã¢ããªå±æ§ãå ¥åãã¾ãã
- ï¼çç¥å¯ï¼ãã®ã¢ããªã«é¢é£ããã°ã«ã¼ãã®ååãå ¥åããã«ã¯:
- [ã°ã«ã¼ã ã¡ã³ãã¼ï¼çç¥å¯ï¼] 㧠[ã°ã«ã¼ããæ¤ç´¢] ãã¯ãªãã¯ããã°ã«ã¼ãåã 1 æå以ä¸å ¥åããã°ã«ã¼ãåãé¸æãã¾ãã
- å¿ è¦ã«å¿ãã¦ã°ã«ã¼ãã追å ãã¾ãï¼æ大 75 åã®ã°ã«ã¼ãï¼ã
- [ã¢ããªã®å±æ§] ã«ããµã¼ãã¹ ãããã¤ãã®å¯¾å¿ããã°ã«ã¼ãå±æ§åãå ¥åãã¾ãã
å ¥åããã°ã«ã¼ãåã®æ°ã«é¢ä¿ãªããSAML ã¬ã¹ãã³ã¹ã«ã¯ãã¦ã¼ã¶ã¼ãï¼ç´æ¥çã¾ãã¯éæ¥çã«ï¼ã¡ã³ãã¼ã«ãªã£ã¦ããã°ã«ã¼ãã®ã¿ãå«ã¾ãã¾ãã詳ããã¯ãã°ã«ã¼ã ã¡ã³ãã¼ã·ããã®ãããã³ã°ã®æ¦è¦ãã覧ãã ããã
- [å±æ§ã®ãããã³ã°] ãã¼ã¸ã§ã[å®äº] ãã¯ãªãã¯ãã¾ãã
- ï¼çç¥å¯ï¼Salesforce ã®èªåãããã¸ã§ãã³ã°ãè¨å®ãããã[OK] ãã¯ãªãã¯ãã¦è¨å®ãå®äºãã¾ãã
- 管çè ã¢ã«ã¦ã³ã㧠Salesforce ã«ãã°ã¤ã³ãã¾ãã
- [Setup] ãã¯ãªãã¯ãã¾ãã
- [Quick Find] ããã¯ã¹ã«ãSingle Sign-Onãã¨å ¥åãã[Single Sign-On Settings] ãã¯ãªãã¯ãã¾ãã
- [Single Sign-on Settings] ã® [Edit] ãã¯ãªãã¯ãã[SAML enabled] ãã§ãã¯ããã¯ã¹ããªã³ã«ãã¾ãã
- [Save] ãã¯ãªãã¯ãã¾ãã
- [SAML Single Sign-On Settings] ã® [New] ãã¯ãªãã¯ãã¾ãã
- 次ã®æ
å ±ãå
¥åãã¾ãã
- Name: Google
- API Name: Google
- Issuer: Google ã® [ã¨ã³ãã£ã㣠ID] ã®å¤ï¼åè¿°ã®æé 1 ã§ã³ãã¼ãããã®ï¼
- Identity Provider Certificate: [Choose File] ãã¯ãªãã¯ããæé 1 ã§ãã¦ã³ãã¼ããã証ææ¸ãã¡ã¤ã«ãé¸æ
- Set Service Provider Initiated Request Binding: HTTP Redirect
- Identity Provider Login URL: æé 1 ã§ã³ãã¼ãã [SSO ã® URL] ã®å¤
- [Save] ãã¯ãªãã¯ãã¾ãã
ï¼çç¥å¯ï¼Service Provider-Initiated SSO ãæå¹ã«ããã«ã¯ã次ã®æä½ãè¡ãã¾ãã
- [Domain Management] [My Domain] ãã¯ãªãã¯ãã¾ãã
- [Authentication Configuration] 㧠[Edit] ãã¯ãªãã¯ãã¾ãã
- [Authentication Service] 㧠[Google] ãã§ãã¯ããã¯ã¹ããªã³ã«ãã¾ãã
- [ä¿å] ãã¯ãªãã¯ãã¾ãã
-
Google 管çã³ã³ã½ã¼ã«ã«ãã°ã¤ã³ãã¾ãã
ç¹æ¨©ç®¡çè 権éã®ããã¢ã«ã¦ã³ãï¼æ«å°¾ã @gmail.com ã§ãªããã®ï¼ã§ãã°ã¤ã³ãã¦ãã ããã
-
管çã³ã³ã½ã¼ã«ã§ãã¡ãã¥ã¼ ã¢ã¤ã³ã³ [ã¢ããª] [ã¦ã§ãã¢ããªã¨ã¢ãã¤ã«ã¢ããª] ã«ã¢ã¯ã»ã¹ãã¾ãã
- [Salesforce] ãé¸æãã¾ãã
-
[ã¦ã¼ã¶ã¼ ã¢ã¯ã»ã¹] ãã¯ãªãã¯ãã¾ãã
-
çµç¹å ã®ãã¹ã¦ã®ã¦ã¼ã¶ã¼ã«å¯¾ãã¦ãµã¼ãã¹ãæå¹ã¾ãã¯ç¡å¹ã«ããã«ã¯ã[ãªã³ï¼ãã¹ã¦ã®ã¦ã¼ã¶ã¼ï¼] ã¾ã㯠[ãªãï¼ãã¹ã¦ã®ã¦ã¼ã¶ã¼ï¼] ãã¯ãªãã¯ãã[ä¿å] ãã¯ãªãã¯ãã¾ãã
-
ï¼çç¥å¯ï¼ç¹å®ã®çµç¹é¨éã«å¯¾ãã¦ãµã¼ãã¹ãæå¹ã¾ãã¯ç¡å¹ã«ããã«ã¯:
- å·¦å´ã§çµç¹é¨éãé¸æãã¾ãã
- ãµã¼ãã¹ã®ã¹ãã¼ã¿ã¹ãå¤æ´ããã«ã¯ã[ãªã³] ã¾ã㯠[ãªã] ãé¸æãã¾ãã
- 次ã®ãããããé¸æãã¾ãã
- [ãµã¼ãã¹] ã®ã¹ãã¼ã¿ã¹ã [ç¶æ¿] ã«ãªã£ã¦ããã親çµç¹ã®è¨å®ãå¤æ´ãããå ´åã§ãç¾å¨ã®è¨å®ãç¶æãããå ´åã¯ã[ãªã¼ãã¼ã©ã¤ã] ãã¯ãªãã¯ãã¾ãã
- [ãµã¼ãã¹ã®ã¹ãã¼ã¿ã¹] ã [ä¸æ¸ãããã¾ãã] ã«ãªã£ã¦ããå ´åã¯ã[ç¶æ¿] ãã¯ãªãã¯ãã¦è¦ªã¨åãè¨å®ã«æ»ããã[ä¿å] ãã¯ãªãã¯ãã¦æ°ããè¨å®ãç¶æãã¾ãï¼è¦ªçµç¹ã®è¨å®ãå¤æ´ãããå ´åã§ããç¾å¨ã®è¨å®ãç¶æãã¾ãï¼ã
注: 詳ããã¯ãçµç¹æ§é ã«ã¤ãã¦ã®ãã¼ã¸ãã覧ãã ããã
-
çµç¹é¨éå ¨ä½ã¾ãã¯çµç¹é¨éå ã®ä¸é¨ã®ã¦ã¼ã¶ã¼ã«å¯¾ãã¦ãµã¼ãã¹ãæå¹ã«ããã«ã¯ãã¢ã¯ã»ã¹ ã°ã«ã¼ãã使ç¨ãã¾ãã詳ããã¯ãã°ã«ã¼ãã«å¯¾ãããµã¼ãã¹ã®æå¹åã«ã¤ãã¦ã®ãã¼ã¸ãã覧ãã ããã
- Salesforce ã®ã¦ã¼ã¶ã¼ ã¢ã«ã¦ã³ãã®ã¡ã¼ã« ID ã Google ãã¡ã¤ã³å ã®ãã®ã¨ä¸è´ãããã¨ã確èªãã¾ãã
Salesforce ã§ã¯ãID ãããã¤ãï¼IdPï¼ãèµ·ç¹ã¨ãã SSO ã¨ãµã¼ãã¹ ãããã¤ãï¼SPï¼ãèµ·ç¹ã¨ãã SSO ã®ä¸¡æ¹ããµãã¼ãããã¦ãã¾ãã以ä¸ã®æé ã«æ²¿ã£ã¦ãããããã®ã¢ã¼ãã® SSO ã確èªãã¾ãã
IdP ãèµ·ç¹ã¨ãã SSO
-
Google 管çã³ã³ã½ã¼ã«ã«ãã°ã¤ã³ãã¾ãã
ç¹æ¨©ç®¡çè 権éã®ããã¢ã«ã¦ã³ãï¼æ«å°¾ã @gmail.com ã§ãªããã®ï¼ã§ãã°ã¤ã³ãã¦ãã ããã
-
管çã³ã³ã½ã¼ã«ã§ãã¡ãã¥ã¼ ã¢ã¤ã³ã³ [ã¢ããª] [ã¦ã§ãã¢ããªã¨ã¢ãã¤ã«ã¢ããª] ã«ã¢ã¯ã»ã¹ãã¾ãã
- [Salesforce] ãé¸æãã¾ãã
- å·¦ä¸ã® [SAML ãã°ã¤ã³ããã¹ã] ãã¯ãªãã¯ãã¾ãã
Salesforce ãå¥ã®ã¿ãã§éãã¾ããéããªãå ´åã¯ã表示ããã SAML ã¨ã©ã¼ ã¡ãã»ã¼ã¸ã®æ å ±ãåèã«ãã¦ãå¿ è¦ã«å¿ã㦠IdP 㨠SP ã®è¨å®ãæ´æ°ããSAML ãã°ã¤ã³ãåãã¹ããã¾ãã
SP ãèµ·ç¹ã¨ãã SSO
- https://{your-domain-name}.my.salesforce.com ãéãã¾ãã
- Google ãã°ã¤ã³ãã¼ã¸ã«èªåçã«ãªãã¤ã¬ã¯ãããã¾ãã
- ãã°ã¤ã³èªè¨¼æ å ±ãå ¥åãã¾ãã
- ãã°ã¤ã³èªè¨¼æ å ±ãèªè¨¼ãããã¨ãSalesforce ã«èªåçã«ãªãã¤ã¬ã¯ãããã¾ãã
ç¹æ¨©ç®¡çè ã¯ãSalesforce ã¢ããªã±ã¼ã·ã§ã³ã®ã¦ã¼ã¶ã¼ ãããã¸ã§ãã³ã°ãèªååãããã¨ãã§ãã¾ãã
GoogleãGoogle Workspaceãããã³é¢é£ãããã¼ã¯ã¨ãã´ã¯ãGoogle LLC ã®åæ¨ã§ãããã®ä»ãã¹ã¦ã®ä¼æ¥åããã³åååã¯ãé¢é£å社ã®åæ¨ã¾ãã¯ç»é²åæ¨ã§ãã