|
Item |
Description |
|
|---|---|---|
|
Prerequisites |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure custom attributes, click here |
||
|
SP-side configuration |
〇 |
Configured by the administrator |
|
Request the SP to configure it |
||
|
Provisioning |
Supports provisioning via API (accounts can be managed in TrustLogin) |
|
|
Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts are created in each system) |
|
|
Access method |
〇 |
SP-Initiated SSO |
|
|
IdP-Initiated SSO |
|
|
Verified operation by device |
〇 |
PC - Browser |
|
ー |
PC - Desktop app |
|
|
〇 |
iOS - Standard browser (Safari) |
|
|
〇 |
iOS - TrustLogin mobile app in-app browser |
|
|
〇 |
iOS - Native app |
|
|
〇 |
Android - Standard browser (Chrome) |
|
|
〇 |
Android - TrustLogin mobile app in-app browser |
|
|
※ |
Android - Native app |
|
※The Android native app is currently under investigation.
TrustLogin Admin Page Configuration
-
Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Corporate App" screen and select "Qast (SAML)".
- From "Identity Provider Information", download the metadata via "Download Metadata".
- Fill in the blank fields under "Service Provider Settings" as follows.
Login URL Qast's login URL
Example: https://[team name].qast.jp/workspaces/1
Entity ID The team name registered in Qast
ACS URL for the service
The team name registered in Qast
- Click the "Register" button.
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Qast (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
Qast Configuration
- Log in to Qast with an administrator account, then click the icon in the upper right of the screen to open My Page.
- From the left menu, go to "Security" and scroll down to "Single Sign-On". Click "Select XML File" and upload the metadata you downloaded from TrustLogin.
- Once the metadata is uploaded successfully, TrustLogin's information will be entered automatically.
Confirm that the upload was successful, then click "Test" to run a connection test.
- If the connection test succeeds, the following pop-up will be displayed. Click "OK".
- When you check "Enabled", the following pop-up will be displayed. Click "OK" to enable single sign-on.
(Note: Once single sign-on is enabled, all members currently logged in to Qast will be automatically logged out and required to log in via SSO. Be sure to confirm that the connection test completes successfully before enabling this.)
TrustLogin User Configuration
① When a user adds it from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Qast (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
② When an administrator adds a member
- Search for and click the "Qast (SAML)" app in the "Admin Page > Apps" menu.
- Click "Add Member", select the user to add from the member list, then click the "Register" button to add them.
How to Log In to Qast
Once single sign-on is configured in Qast, the following screen will be displayed at login.
Click "Log in with SSO" to log in.