TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
   
   
   
2. Search on the "Register Company App" screen and select "Cloudflare (SAML)".
   
   
   
3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
   
   
   
4. Enter the "team name" of your Cloudflare Zero Trust instance into the three blank fields — "Login URL", "Entity ID", and "ACS URL to Service" — under "Service Provider Settings".
   The team name can be found under "Settings > General > Team domain" in Cloudflare Zero Trust.
   
   
   
   
   
5. Click the "Register" button to save.
   
   
6. To perform a connection test during the Cloudflare configuration in the next section, add the administrator performing this configuration as a member of the SAML app you created. In the "Admin Page > App" menu, search for the "Cloudflare (SAML)" app, and use "Add Member" to add the administrator account.
   

Cloudflare Settings

1. After logging in to the Cloudflare dashboard with the administrator account, open "Zero Trust" from the menu on the left.
   
   
   
2. Open "Settings > Authentication".
   
   
   
3. Click the "Add new" button under "Login methods".
   
   
   
4. Select "SAML".
   
   
   
5. Enter any name you like in "Name", and drag and drop the metadata downloaded from TrustLogin into the drop area.
   
   
   After dropping the metadata, confirm that the values for "Single sign-on URL", "IdP Entity ID or Issuer URL", and "Signing certificate" below have been populated automatically.
   
   
   
6. Scroll down to "SAML attributes" and add rows using "＋ Add attributes". Enter "email", "firstName", and "lastName" in the three rows.
   
   
   
7. Click the "Save" button to save.
   
   
8. Click "Test" to the right of the SAML configuration you created.
   
   
   If "Your connection works!" is displayed, the connection test was successful.
   
   
   
9. Open "Access > Access Groups" from the menu on the left, and open "Edit" for the default group. (If no Access Group has been configured, add one using "Add a Group".)
   
   
   
10. Under "Group configuration", select "Login Methods" from the "Selector" dropdown, and check the SAML configuration you created under "Value".
    
    
    
11. Click the "Save" button to save.
    
    
12. Open "Settings > Authentication" and click the "Manage" button under "App Launcher".
    
    
    
13. On the Rules tab, click the "Add a rule" button.
    
    
    
14. Set any name you like for "Rule Name", and set "Rule Action" to "Allow".
    Under "Assign a group", check the group you configured in step 9, and click the "Save" button to save.
    
    
    
15. Open the Authentication tab and allow the SAML configuration you set up. Please configure the details to match your organization's operational needs. (In the image below, all IdP configurations are allowed as an example.)
    Finally, click the "Save" button to save.
    

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select "Cloudflare (SAML)" and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an administrator adds members

1. Search for and click the "Cloudflare (SAML)" app in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.
   
   

How to Log In to Cloudflare

1. From TrustLogin's My Page, the browser extension app icon,
   or by opening https://<your team name>.cloudflareaccess.com/ in a browser.
   
   
2. Click the "Login" button.
   
   
   
3. Click the SAML button you configured under "Sign in with:".
   
   
   
4. Login is complete and the App Launcher is displayed.