|
Item |
Details |
|
|---|---|---|
|
Prerequisites |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side configuration |
〇 |
Configured by the administrator |
|
Request the SP to configure this |
||
|
Provisioning |
Supports provisioning via API (accounts can be managed in TrustLogin) |
|
|
Supports SAML JIT provisioning (accounts can be managed in TrustLogin; users cannot be deleted) |
||
|
〇 |
None (accounts are created in each system) |
|
|
Access method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified operation by device |
〇 |
PC - Browser |
|
ー |
PC - Desktop app |
|
|
〇 |
iOS - Standard browser (Safari) |
|
|
〇 |
iOS - TrustLogin mobile app internal browser |
|
|
ー |
iOS - Native app |
|
|
〇 |
Android - Standard browser (Chrome) |
|
|
〇 |
Android - TrustLogin mobile app internal browser |
|
|
ー |
Android - Native app |
|
Note: If the "Login ID" in Sales Force Assistant is not an email address, you will need to add the "Login ID" to the member information in TrustLogin and link the two. For detailed instructions, please refer to the pages below.
(This is not necessary if the Login ID for Sales Force Assistant is set to the same email address registered in TrustLogin.)
- How to Configure Custom Attributes (Individual Registration)
- How to Configure Custom Attributes (Bulk Registration)
Configuring the TrustLogin Admin Page
-
Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
- On the "Register Corporate App" screen, search for and select "Sales Force Assistant (SAML)."
- Download the metadata from "Download Metadata" under "Identity Provider Information." (You will need this later when configuring the Sales Force Assistant side.)
Now let's move on to the settings on the Sales Force Assistant side. Please open Sales Force Assistant in a separate window.
Note: If you might need to interrupt your work, click the "Register" button in the upper right to save your settings.
Configuring Sales Force Assistant
- Log in with an administrator account and click "System Settings" to go to the administrator screen.
- Open "Security > SAML Authentication."
- For the logout URL under "Service Provider (NI Product) Settings," enter any URL you want users to be redirected to after logging out of Sales Force Assistant. Download the metadata using the download button under "Metadata."
- Under "Identity Provider Settings," upload the metadata you downloaded from TrustLogin by dragging and dropping it into the "Metadata" field, or by using the button on the right.
After clicking the "Load" button, the "Entity ID," "Endpoint URL," and "Certificate" fields will be filled in automatically.
- Check "Use" under "Single Sign-On Settings > Single Sign-On" and save.
- Click "Finish Settings."
Return to the TrustLogin Admin Page again.
Configuring the TrustLogin Admin Page (Continued)
- Configure each item under "Service Provider Settings" as follows.
Redirect URL after successful SP authentication Enter the URL of the My Page that appears after logging in to Sales Force Assistant.
Example) https://xxxxxxxx.com/xxxxxxxx/ni/nicrm/main/Value for Name ID ・If the Sales Force Assistant Login ID and the TrustLogin email address are the same
→ Set "Member > email"
・If the Sales Force Assistant Login ID and the TrustLogin email address are different
→ Set "Custom Attribute > the custom attribute name you configured"Metadata Upload the metadata downloaded from Sales Force Assistant
- Click the "Register" button in the upper right to finish.
Configuring TrustLogin Users
① When users add the app from My Page
- Click the "Add App" button on "My Page."
- On the "Register App" screen, select "Sales Force Assistant (SAML)" and click the "Next" button in the upper right of the screen.
- Enter a new value if you want to change the "Display Name," then click the "Register" button.
② When an administrator adds members
- In the "Admin Page > Apps" menu, search for and click the "Sales Force Assistant (SAML)" app.
- Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.