Item	Details
Pre-check	Prior configuration in Re:lation is required. For the latest setup instructions, please check the manual provided by Re:lation. Re:lation's SAML JIT supports new user creation only. Since changes made in TrustLogin are not reflected, the administrator must update information manually in Re:lation. If a user not yet registered in Re:lation performs SSO for the first time and Re:lation's user registration limit has been reached, the user cannot be created. Please be aware of this.
Name ID	〇	Email address
		Custom attribute　Note: For how to configure custom attributes, see here
SP Configuration	〇	Configured by the administrator
		Request SP to configure
Provisioning		API-based Provisioning supported (account management available in TrustLogin)
	〇	SAML JIT Provisioning supported (new user creation only; update and deletion not supported)
		None (accounts created in each system)
Access Method	〇	SP-Initiated SSO
	〇	IdP-Initiated SSO
Device Compatibility	〇	PC - Browser
	ー	PC - Desktop App
	〇	iOS - Standard Browser (Safari)
	〇	iOS - TrustLogin Mobile App In-App Browser
	〇	iOS - Native App
	〇	Android - Standard Browser (Chrome)
	〇	Android - TrustLogin Mobile App In-App Browser
	ー	Android - Native App

Prerequisites

You need to configure a custom attribute in TrustLogin member information in advance to link the employee number.

Note: Only configure the custom attribute if you want to add the employee number when creating a user.

[TrustLogin Custom Attribute Configuration Example]

Please refer to the following pages for instructions on how to configure this.

• Custom Attribute Setup (Individual Registration)
• Custom Attribute Setup (Bulk Registration)

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register SAML App" button in the upper right of the screen.
   
   
   
2. Configure the "Application Name" and "Icon" (optional).
   
3. Note down the "Identity Provider URL" and "Issuer / Entity ID" under "Identity Provider Information", and download the certificate from "Get Certificate".

Now, switch to configuring the Re:lation side. Please open Re:lation in a separate window.

Re:lation Settings

1. Log in with an administrator account and select "System Settings" from the icon in the upper right.
   
   
   
2. Select "SAML" from the menu on the left, and click the edit button for "Identity Provider Information".
   
   
   
3. In "Edit SAML Settings", configure the information you noted down from TrustLogin as follows, and click "Save".

   Mode	Select as you prefer. (We recommend setting this to "Migration Mode" while configuring SAML.)
   IdP Identifier	The "Issuer / Entity ID" you noted down from TrustLogin
   Login URL	The "Identity Provider URL" you noted down from TrustLogin
   Certificate	Open the "Certificate" you noted down from TrustLogin and paste it in

   
   
   
   
4. Copy and note down the "IdP Identifier" and "Response URL (Assertion Consumer Service URL)" under "Service Provider Information".

TrustLogin Admin Page Settings (Continued)

1. Configure each item under "Service Provider Settings" as follows.

   Sign SAML response	Check the box
   Value for Name ID	[Member]-[email]
   Entity ID	Enter the "IdP Identifier" you noted down from Re:lation
   Name ID Format	Select "Unspecified"
   ACS URL to Service	Enter the "Response URL (Assertion Consumer Service URL)" you noted down from Re:lation

   
   
   
2. Add an attribute using the "Add SAML Attribute" button under "SAML Attribute Settings", and configure it as follows.

   Service Provider Attribute				TrustLogin (IdP) Attribute
   Attribute Designation Name	Attribute Type	Attribute Name			Attribute Value
   first_name	Basic	first_name	↔︎	Member	Member - First Name
   last_name	Basic	last_name	↔︎	Member	Member - Last Name
   dept_name	Basic	dept_name	↔︎	Member	Member - Department
   emp_no	Basic	emp_no	↔︎	Custom Attribute	Attribute name is optional (e.g., Employee Number)

   Note: The "emp_no" item in row 4 is optional. Only add this attribute if you want to add the employee number.
   
   

3. Click "Register" to save the settings.

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select the custom SAML app you created, and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Save" button.
4. Click the app on "My Page" or in the browser extension, and confirm that login succeeds.
   
   

②When an administrator adds members

1. Search for and click the custom SAML app you created in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

How to Log in to Re:lation

1. Open Re:lation from the app icon on TrustLogin's My Page or in the browser extension.
   
   
2. When logging in as a user not yet registered in Re:lation, the user registration screen below will be displayed. Click the "Register User" button to log in.
   Note: The user information registered in step 2 of "TrustLogin Admin Page Settings (Continued)" will be automatically reflected.