How to Configure SAML Authentication for RECOG

Item

Details

Prerequisites

  • Prior configuration in RECOG is required.

  • You must create an account in RECOG using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by RECOG.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Corporate App" screen, search and select "RECOG (SAML)".
    RECOG01.png

  3. Note down the "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information," and download the certificate from "Get Certificate."
    03__1_.png

Now let's move on to the RECOG settings. Please open RECOG in a separate window.

RECOG Settings

  1. Log in with an administrator account and click the hamburger menu in the upper right.
    RECOG02.png

  2. Click the "gear icon" to the right of the company name and select "Company Settings."
    RECOG03.png

  3. From the menu on the left, select "Security Settings" and open the "SSO Settings" tab at the top of the screen.
    RECOG04.png

  4. Configure the following items under "Identity Provider" as shown below.
    Entity ID The "Issuer/Entity ID" you noted from TrustLogin
    SSO URL

    The "IdP URL" you noted from TrustLogin

    Certificate (Base64 encoded)

    Open the "certificate" you noted from TrustLogin and paste it in


    RECOG05.png

  5. Note down the "Entity ID" and "ACS URL" of "RECOG (Service Provider)."
    (Note: You will configure these in TrustLogin later.)
    RECOG06.png

  6. Click "Save" at the bottom of the screen.
    RECOG07.png


    TrustLogin Admin Page Configuration (Continued)

    1. Configure each item under "Service Provider Settings" with RECOG's information as shown below.
      Entity ID Enter the "Entity ID" you noted from RECOG
      ACS URL for the Service Enter the "ACS URL" you noted from RECOG

      RECOG08.png

    2. Click the "Register" button to save the settings.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "RECOG (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "RECOG (SAML)" app.
  2. Click "Add Member," select the user(s) to add from the member list, and click the "Register" button to add them.

SSO Authentication Method for the Native App
To use RECOG on a mobile device, you must use the native app. (Note: It cannot be used from a mobile browser.) To use the native app, follow the steps below.

  1. Download the RECOG native app.
  2. Open the RECOG app and select "Sign in with SSO."RECOG09.png

  3. On the URL entry screen, enter your subdomain for the SSO-only login URL.
    Example: https://www.recog.works/api/saml/your subdomain/sso
    RECOG10.png

  4. You will be redirected to the TrustLogin login screen. Log in to TrustLogin and use the app. (Note: If TrustLogin is already open, you will not be redirected to the login screen.)

How to Configure SAML Authentication for RECOG

Item

Details

Prerequisites

  • Prior configuration in RECOG is required.

  • You must create an account in RECOG using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by RECOG.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Corporate App" screen, search and select "RECOG (SAML)".
    RECOG01.png

  3. Note down the "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information," and download the certificate from "Get Certificate."
    03__1_.png

Now let's move on to the RECOG settings. Please open RECOG in a separate window.

RECOG Settings

  1. Log in with an administrator account and click the hamburger menu in the upper right.
    RECOG02.png

  2. Click the "gear icon" to the right of the company name and select "Company Settings."
    RECOG03.png

  3. From the menu on the left, select "Security Settings" and open the "SSO Settings" tab at the top of the screen.
    RECOG04.png

  4. Configure the following items under "Identity Provider" as shown below.
    Entity ID The "Issuer/Entity ID" you noted from TrustLogin
    SSO URL

    The "IdP URL" you noted from TrustLogin

    Certificate (Base64 encoded)

    Open the "certificate" you noted from TrustLogin and paste it in


    RECOG05.png

  5. Note down the "Entity ID" and "ACS URL" of "RECOG (Service Provider)."
    (Note: You will configure these in TrustLogin later.)
    RECOG06.png

  6. Click "Save" at the bottom of the screen.
    RECOG07.png


    TrustLogin Admin Page Configuration (Continued)

    1. Configure each item under "Service Provider Settings" with RECOG's information as shown below.
      Entity ID Enter the "Entity ID" you noted from RECOG
      ACS URL for the Service Enter the "ACS URL" you noted from RECOG

      RECOG08.png

    2. Click the "Register" button to save the settings.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "RECOG (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "RECOG (SAML)" app.
  2. Click "Add Member," select the user(s) to add from the member list, and click the "Register" button to add them.

SSO Authentication Method for the Native App
To use RECOG on a mobile device, you must use the native app. (Note: It cannot be used from a mobile browser.) To use the native app, follow the steps below.

  1. Download the RECOG native app.
  2. Open the RECOG app and select "Sign in with SSO."RECOG09.png

  3. On the URL entry screen, enter your subdomain for the SSO-only login URL.
    Example: https://www.recog.works/api/saml/your subdomain/sso
    RECOG10.png

  4. You will be redirected to the TrustLogin login screen. Log in to TrustLogin and use the app. (Note: If TrustLogin is already open, you will not be redirected to the login screen.)