How to Configure SAML Authentication for Keyspider

Item

Content

Prerequisites

  • Advance configuration in Keyspider is required.

  • You must create an account in Keyspider using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by Keyspider.

Name ID

Email address

 

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-Side Configuration

Configured by the administrator

 

Request configuration from the SP

Provisioning

 

Supports API-based provisioning (accounts can be managed in TrustLogin)

 

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

 

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the “Admin Page > Apps” menu, and click the “Register App” button in the upper right of the screen.
    01.png

  2. On the “Corporate App Registration” screen, search for and select “Keyspider (SAML)”.
    02.png

  3. Note down the values of “IdP URL” and “Issuer/Entity ID” under “Identity Provider Information,” then download the certificate using the “Get Certificate” button.
    03.png

Now switch to the Keyspider settings. Please open Keyspider in a separate window.

Keyspider Configuration

  1. Log in to Keyspider and open “Keyspider Administration” in the left-hand menu.
    04.png

  2. Click “Feature Settings > Single Sign-On Settings > Create New (+)”.
    05.png

  3. Configure each item on the new IdP registration screen as follows, then click the “Save” button.
    IdP Name Any name
    IdP Display Name Any name
    NameID Attribute Email address
    Entity ID The “Issuer/Entity ID” obtained from TrustLogin
    Authentication Endpoint URL The “IdP URL” obtained from TrustLogin
    SLO Endpoint URL

    https://portal.trustlogin.com/

    IdP Certificate for Signing Paste the contents of the “Certificate” obtained from TrustLogin
    Status Check “Published”

    06.png

  4. Click the IdP configuration created in the previous step.
    07.png

  5. Copy the entire “Metadata” string, then click “Close”.
    08.png

  6. Create an XML file from the string you copied in the previous step.
     ①Paste the string copied in Step 5 into a text editor.
     ②Save it with a file name.
     ③For “File type,” select “All Files”.
     ④Set any file name, and at the end, add “.xml” and save it.

TrustLogin Admin Page Configuration (Continued)

  1. Upload the XML file (metadata) you created using “Select Metadata” under “Service Provider Settings”.
    09.png

  2. Save by clicking the “Register” button.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On “My Page,” click the “Add App” button.
  2. On the “App Registration” screen, select “Keyspider (SAML),” then click the “Next” button in the upper right of the screen.
  3. If you want to change the “Display Name,” enter it, then click the “Register” button.

② When an Administrator Adds Members

  1. In the “Admin Page > Apps” menu, search for and click the “Keyspider (SAML)” app.
  2. Click “Add Member,” select the users to add from the member list, then click the “Register” button to add them.

 

Keyspider SSO Method

  1. Access TrustLogin’s login URL directly in your browser, or click “Keyspider (SAML)” from TrustLogin’s My Page or the browser extension.

  2. Click the “IdP Display Name” you configured under “Login With”.
    10.png

  3. You will be redirected and SSO will be completed.
    If you access the Keyspider login URL directly in your browser and are not logged in to TrustLogin, you will be redirected to the TrustLogin authentication screen. SSO will be completed after authentication.

 

How to Configure SAML Authentication for Keyspider

Item

Content

Prerequisites

  • Advance configuration in Keyspider is required.

  • You must create an account in Keyspider using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by Keyspider.

Name ID

Email address

 

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-Side Configuration

Configured by the administrator

 

Request configuration from the SP

Provisioning

 

Supports API-based provisioning (accounts can be managed in TrustLogin)

 

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

 

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the “Admin Page > Apps” menu, and click the “Register App” button in the upper right of the screen.
    01.png

  2. On the “Corporate App Registration” screen, search for and select “Keyspider (SAML)”.
    02.png

  3. Note down the values of “IdP URL” and “Issuer/Entity ID” under “Identity Provider Information,” then download the certificate using the “Get Certificate” button.
    03.png

Now switch to the Keyspider settings. Please open Keyspider in a separate window.

Keyspider Configuration

  1. Log in to Keyspider and open “Keyspider Administration” in the left-hand menu.
    04.png

  2. Click “Feature Settings > Single Sign-On Settings > Create New (+)”.
    05.png

  3. Configure each item on the new IdP registration screen as follows, then click the “Save” button.
    IdP Name Any name
    IdP Display Name Any name
    NameID Attribute Email address
    Entity ID The “Issuer/Entity ID” obtained from TrustLogin
    Authentication Endpoint URL The “IdP URL” obtained from TrustLogin
    SLO Endpoint URL

    https://portal.trustlogin.com/

    IdP Certificate for Signing Paste the contents of the “Certificate” obtained from TrustLogin
    Status Check “Published”

    06.png

  4. Click the IdP configuration created in the previous step.
    07.png

  5. Copy the entire “Metadata” string, then click “Close”.
    08.png

  6. Create an XML file from the string you copied in the previous step.
     ①Paste the string copied in Step 5 into a text editor.
     ②Save it with a file name.
     ③For “File type,” select “All Files”.
     ④Set any file name, and at the end, add “.xml” and save it.

TrustLogin Admin Page Configuration (Continued)

  1. Upload the XML file (metadata) you created using “Select Metadata” under “Service Provider Settings”.
    09.png

  2. Save by clicking the “Register” button.

TrustLogin User Configuration

① When a User Adds the App from My Page

  1. On “My Page,” click the “Add App” button.
  2. On the “App Registration” screen, select “Keyspider (SAML),” then click the “Next” button in the upper right of the screen.
  3. If you want to change the “Display Name,” enter it, then click the “Register” button.

② When an Administrator Adds Members

  1. In the “Admin Page > Apps” menu, search for and click the “Keyspider (SAML)” app.
  2. Click “Add Member,” select the users to add from the member list, then click the “Register” button to add them.

 

Keyspider SSO Method

  1. Access TrustLogin’s login URL directly in your browser, or click “Keyspider (SAML)” from TrustLogin’s My Page or the browser extension.

  2. Click the “IdP Display Name” you configured under “Login With”.
    10.png

  3. You will be redirected and SSO will be completed.
    If you access the Keyspider login URL directly in your browser and are not logged in to TrustLogin, you will be redirected to the TrustLogin authentication screen. SSO will be completed after authentication.