-OneLoginを利用した次世代のID管理-

Self Introduction

• Kei Miyazawa

• IT Department

• OneLogin Evangelist(UnOfficial)

• Like:OneLogin､Box､AWS

• Hobby:Yu-Gi-Oh､Nogizaka46

2

• General function• Single Sign-On• Directory integration• Multi-factor authentication

• A great feature• Compliance• Secure all Macs

• Summary

3

General function

• Single Sign-On

• Directory integration

• Multi-factor authentication

4

Single Sign-On(SSO)

• Agency input Login

• SAML Login

5

Agency input

6

SAML

7

Directory integration

8

Account Sync

• Synced to OneLogin from Active Directory.

• like AD, LDAP, Google Apps, or Workday.

AD Integration

9

Multi-factor authentication

• A variety of mobile apps available.

10

Strong authentication(MFA)

• Correspondence such as YubiKey

11

A great feature

• Compliance

• Secure all Macs

12

Compliance

13

• centralized recording.

• all user changes and activity.

• Retroactive forensics.

Secure all Macs

14

Login to Mac

• Configure Macs so OneLogin credentials can be used to log in once.

• Windows will be available in Q2.

Demo

15

MacにOneLoginユーザーが存在

16

ネットワークアカウントサーバーを確認

17

OneLoginのLDAPが存在

18

OneLoginユーザーでログイン

19

OneLoginユーザーでログインできる

20

SUMMARY•Simplify the SSO

•ID safely with MFA

•Secure all Macs

21

Reference material

• https://eskade20.wordpress.com/category/onelogin/

• http://aws.typepad.com/aws_partner_sa/2016/07/opsjaws-try-ops-with-onelogin-1.html

• https://support.onelogin.com/hc/en-us

22