How to Configure SAML Authentication for board

Item

Details

Prerequisites

  • Prior configuration in board is required.

  • You must create an account in board using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by board.

  • board's single sign-on feature is a paid add-on.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Corporate App" screen, search and select "board (SAML)."
    board01.png

  3. Download the metadata by clicking the "Download Metadata" button under "Identity Provider Information."

    03__2_.png

Now let's move on to the board settings. Please open board in a separate window.

board Settings

  1. Log in with an administrator account and select "Single Sign-On Settings" from "Organization Settings" in the upper right.
    board02.png

  2. Open the "Identity Provider Settings" tab, upload the metadata you downloaded from TrustLogin using "Choose File," and click the Register button.
    board03.png

  3. After clicking the Register button, the "Entity ID," "Certificate" fields are automatically filled in.
    Note: Once "Identity Provider Settings" registration is complete, the "SSO Operation Mode," "SP-initiated SSO," and "Admin SSO Bypass URL" tabs will appear.board04.png

  4. Open the "Service Provider Information" tab and note down the "ACS URL" and "Audience" values.
    (Note: You will configure these in TrustLogin later.)

    board05.png

  5. Open the "SSO Operation Mode" tab, select the login format, and click "Register."
    Note: Selecting "Single Sign-On Only" will disable login via email address and password. While configuring SAML, we recommend selecting "Use Both Normal Login and Single Sign-On," and switching to "Single Sign-On Only" only after all configuration is complete.
    board06.png
    Note: Even when the operation mode is set to "Single Sign-On Only," only users with administrator privileges can still log in normally using the URL shown on the "Admin SSO Bypass URL" tab. In case SSO becomes unavailable, please keep the URL below in a safe place.
    board07.png

TrustLogin Admin Page Configuration (Continued)

  1. Configure each item under "Service Provider Settings" with board's information as shown below.
    Entity ID Enter the "Audience" you noted from board
    ACS URL for the Service Enter the "ACS URL" you noted from board

    board08.png
  2. Click "Register" to save.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "board (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "board (SAML)" app.
  2. Click "Add Member," select the user(s) to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for board

Item

Details

Prerequisites

  • Prior configuration in board is required.

  • You must create an account in board using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by board.

  • board's single sign-on feature is a paid add-on.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Corporate App" screen, search and select "board (SAML)."
    board01.png

  3. Download the metadata by clicking the "Download Metadata" button under "Identity Provider Information."

    03__2_.png

Now let's move on to the board settings. Please open board in a separate window.

board Settings

  1. Log in with an administrator account and select "Single Sign-On Settings" from "Organization Settings" in the upper right.
    board02.png

  2. Open the "Identity Provider Settings" tab, upload the metadata you downloaded from TrustLogin using "Choose File," and click the Register button.
    board03.png

  3. After clicking the Register button, the "Entity ID," "Certificate" fields are automatically filled in.
    Note: Once "Identity Provider Settings" registration is complete, the "SSO Operation Mode," "SP-initiated SSO," and "Admin SSO Bypass URL" tabs will appear.board04.png

  4. Open the "Service Provider Information" tab and note down the "ACS URL" and "Audience" values.
    (Note: You will configure these in TrustLogin later.)

    board05.png

  5. Open the "SSO Operation Mode" tab, select the login format, and click "Register."
    Note: Selecting "Single Sign-On Only" will disable login via email address and password. While configuring SAML, we recommend selecting "Use Both Normal Login and Single Sign-On," and switching to "Single Sign-On Only" only after all configuration is complete.
    board06.png
    Note: Even when the operation mode is set to "Single Sign-On Only," only users with administrator privileges can still log in normally using the URL shown on the "Admin SSO Bypass URL" tab. In case SSO becomes unavailable, please keep the URL below in a safe place.
    board07.png

TrustLogin Admin Page Configuration (Continued)

  1. Configure each item under "Service Provider Settings" with board's information as shown below.
    Entity ID Enter the "Audience" you noted from board
    ACS URL for the Service Enter the "ACS URL" you noted from board

    board08.png
  2. Click "Register" to save.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "board (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > Apps" menu, search for and click the "board (SAML)" app.
  2. Click "Add Member," select the user(s) to add from the member list, and click the "Register" button to add them.