100
ථ၌༶ၑᐄ༶ື
101
Chapter 3
ༀໄd
٫ܝ
І್ც
ࠅ
ණʕόԒʱ၍ଣ
ה
ცٙᗫഐf
ᑌຑʷeණʕόԒʱ᜕ᗇ
Centralised Authentication
ʿఊɓ೮ɝ
Single Sign-On
d
SSO
ίԒʱᗆйʿπ՟၍ଣ˴ᕚٙ௰
ܝ
dҢ
ࡁ
ਗ਼ྒྷ༊٧͍੬ԈٙϞᗫఊɓ೮ɝٙ
፹
Ⴌᝈׂf
ה
ፗఊɓ೮ɝdจܸ͜˒ӊϣ೮ɝӻ୕ʘ
ܝ
dί༈Դ͜ಂගޫ̙Դ͜
ה
Ϟ
ӻ୕̌ঐdϾʔึ
ࠅ
Ӌ͜˒ࠠልੂБӊɓӻ୕ٙ೮ɝf
ɨΐઋ
ر
Ԩʔ᙮ఊɓ೮ɝj
Νɓ೮ɝԴ͜ಂගd͜˒ʥ০࿁ӊɓධථ၌ਕd፩ɝՉԒʱ᜕ᗇ༟ࣘf
ν
؈
મ͜ණʕʷ᜕ᗇӻ୕ɰ݊வᅵٙઋ
ر
dӊධථ၌ਕேึͪණʕʷ᜕
ᗇӻ୕dΎϣආБ᜕ᗇٙਗЪfவ၇
ࠅ
Ӌࠠል೮ɝًٙ
ر
dேʔ݊ఊɓ೮ɝf
͜˒၍ଣίਕӻ୕ʘගʊΝӉʷdШʥ್
ࠅ
Ӌ͜˒ࠠል፩ɝԒʱᗆй༟
ࣘdʑঐ՟͜ӻ୕ਕdவ၇ઋ
ޟر
Їʔၑණʕό᜕ٙᗇӻ୕f
ఊɓ೮ɝν
؈
͟ථ၌ਕਠԶఊɓ೮ɝ̌ঐdϓ
މ
ՉΥථ၌ਕٙɓᐑd
ۆ
᜕ᗇʕːٙఊɓ೮ɝЪุ
ݴ
̀ձ
ה
Ϟਕӻ୕ʚ˸ΥdʑঐୌΥఊɓ೮ɝٙ
ცӋfϤɓΥஷ੬
ڷ
ਗ਼
ࡈ
ɛᇁ၍ଣኜʩ
Access Manger Component
ෂՑ
ᗫᏐ͜ӻ୕Ը༺ϓਞԈྡ
3.4
f
ක׳όԒʱႩᗇਕਠΥ
Open identity provider integration
̤ɓ
༺ࡈ
ϓఊɓ೮ɝٙ˙
ج
d
މ
Դ͜ණʕʷٙʮ͜ථԒʱԸ᜕ᗇਕਠٙਕf
ථ၌ਕɰ̙̍ўఱήਕ̙л͜
Facebook
e
Google
eඩ
ډ
ഃʮӻ୕
ה
Ꮇ
πٙԒʱ༟ࣘҁϓԒʱ᜕ᗇҏf̥݊ɪ
ࠑ
Ԓʱ᜕ᗇٙΥ˙όdЇʦʥೌ
ج
ᆽ
ڭ
τ
ΌೌdԨ˲ঐၾΆุٙӻ୕࢙fШ߰Դ͜Άุlzٙ
LDAP
༆
Ӕ˙ࣩԸԶᗆй
ᇁ
28
dఱ̙˸ίථ၌
ݖ
ɨԶၾΆุ࢙ٙԴ͜٫Ԓʱ
ID
᜕ᗇਕf
ೌሞΆุԴٙ݊͜։̮
א
ІБஈଣٙණʕʷπ՟છՓਕਗ਼᜕ᗇ̌ঐ։̮ஈଣ
א
͟ΆุlzੂБd
א
݊ீཀΆุӷϞථ
ݖ
d
א
༶͜Άุlz᜕ٙᗇʕːዚՓd
ே፯Չʕɓ၇˙όd˸Ո௪ఊɓ೮ɝٙঐɢdᜫਕ༺Ց৷
ܓ
̙ٙ͜fԴ͜ಂ
ගd͜˒̥߰ੂБɓϣ೮ɝ᜕ᗇd
ۆ
π՟છՓఱܼ̀̍Ϥ༟ࣘdԨίᏐ͜ό
ࠅ
ӋࣛԶϤ͜˒༟ࣘdνϤ
ک
ʔึ
ࠅ
Ӌ͜˒ࠠል೮ɝf
ʔሞ݊˸͜˒˿
א
˸ቇٙͪʧࠦdᏐ͜ӻ୕ேც
ࠅ
Υఊɓ೮ɝٙ̌ঐd
ʑ̙Զ༨ӻ୕ٙఊɓ೮ɝf
ᑌΥ
Federation
Ԓʱ᜕ᗇʿબᛆӻ୕ᜫତʦٙථ၌ਕᜊһ̋ҁ௪fτΌπ՟ਕ݊
ה
Ϟථ
၌
͜˒࿁ථ၌ਕਠٙಂ
ܙ
fШৰəఊɓ೮ɝ̮d൷ᕎ̙˸ீʷήԴ͜ࡰʈ༟ࣘ
ٙͦᅺdᒔϞ
ڗܘ
ٙ༩
ࠅ
ԐfίவᅵٙͦᅺɨdᑌΥͦਕ
Directory Services
Federation
ɗ݊ɓ
ࡈ
ग़փٙοf
᜕ᗇ
LDAP
ྡ ఊɓ೮ɝ
೮
ɝ
π՟၍ଣଣ
τΌ᜕ᗇӻ୕
ͦπ՟
ஷৃ֛
Ꮠ͜ό
બᛆ
ྼᗇ ແ
ߒ
28
請參考微軟
Windows Azure Access Control service:
535.
aspx)
