TrustLogin Admin Page Configuration

1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. On the "Company App Registration" screen, search and select "Shoplan Headquarters (SAML)."
   
   
   
3. Note down the "IdP URL" and "Issuer / Entity ID" under "Identity Provider Information," then download the certificate from "Get Certificate."
   
4. Enter your domain in the blank fields for "Login URL," "Entity ID," and "ACS URL for Service" under "Service Provider Settings."
   Note: To check your domain, refer to the login URL provided by Shoplan.
   　Example: https://[Your Domain]/h2/Login.do
   
   
5. Note down the "Entity ID" (you will enter this in Shoplan later).
   　Example: https://[Your Domain]/head
   
   
   Now, let's move on to the Shoplan configuration. Please open Shoplan in a separate window.

Shoplan Configuration

1. Log in to the headquarters account using an administrator account.
2. Open the "Management" tab and select "System Management."
   
   
   
3. From the "Option Management" tab, select "Security Settings."
   
   
   
4. In the "External Service Headquarters User Authentication" section, select "Authenticate with SAML 2.0" and configure the fields as follows.
   

   IdP Entity ID	The Issuer/Entity ID noted from TrustLogin
   SP Entity ID	The Entity ID entered in TrustLogin's "Service Provider Settings" https://[Your Domain]/head
   Login Name Policy	Select urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress
   SAML Sign-On Endpoint URL	The IdP URL noted from TrustLogin
   SAML Logout Endpoint URL	https://portal.trustlogin.com/
   X.509 Certificate	Open the certificate downloaded from TrustLogin and paste it in

   
   
   
   
5. For "Combined Use with ID/Password Authentication," selecting "Prioritize External Service" will result in SAML-only login. While configuring SAML, we recommend selecting "Use ID/Password Authentication Together."
   Note: If you select "Prioritize External Service" and are unable to log in due to an error in the SAML configuration, you can log in with your ID and password by accessing https://[Your Domain]/h2/Login.do?identity=skip.
   
6. Click "Change" at the bottom of the page.
   

TrustLogin User Configuration

① When a User Adds the App from My Page

1. Click the "Add App" button on "My Page."
2. On the "App Registration" screen, select "Shoplan Headquarters (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name," enter it, then click the "Register" button.
4. Click the app from "My Page" or the browser extension, and confirm that login is successful.

② When an Administrator Adds Members

1. In the "Admin Page > Apps" menu, search for and click the "Shoplan Headquarters (SAML)" app.
2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.