How to Configure SAML Authentication for Kuraizeru

Item

Details

Prerequisites

  • Advance configuration in Kuraizeru is required.

  • The "Login Name" of the Kuraizeru account must match the email address registered in TrustLogin.

  • For the latest configuration steps, please refer to the manual provided by Kuraizeru.

NameID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion is not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Kuraizeru (SAML)".
    02.png

  3. Note the values of "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now switch to the Kuraizeru configuration. Please open Kuraizeru in a separate window.

Kuraizeru Configuration

  1. Log in with an administrator account and open "System > SAML Integration".
    04.png

  2. Configure each item under "SAML General Settings" and "IdP Settings" as follows.
    SSO (Single Sign-On) Setting Either of the "Enabled" options
    Note: "Enabled (Password login enabled)" is recommended while configuring SAML
    IdP Information to Use NameID
    Account Information to Use Login Name (Email address)
    Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Endpoint URL The "IdP URL" obtained from TrustLogin
    Certificate Paste the entire contents of the certificate obtained from TrustLogin

    05.png
  3. Note the "Entity ID" and "ACS URL" information under "SP Settings", and click the "Next" button.
    06.png

  4. On the next screen, click the "Execute" button.

Return to the TrustLogin admin page again.

TrustLogin Admin Page Configuration (Continued)

  1. Configure each item under "Service Provider Settings" with the Kuraizeru information as follows.
    Entity ID The "Entity ID" obtained from Kuraizeru
    ACS URL for the Service The "ACS URL" obtained from Kuraizeru

    07.png

  2. Save the settings using the "Register" button.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. Select "Kuraizeru (SAML)" on the "Register App" screen, and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "Kuraizeru (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Kuraizeru

Item

Details

Prerequisites

  • Advance configuration in Kuraizeru is required.

  • The "Login Name" of the Kuraizeru account must match the email address registered in TrustLogin.

  • For the latest configuration steps, please refer to the manual provided by Kuraizeru.

NameID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion is not supported)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Kuraizeru (SAML)".
    02.png

  3. Note the values of "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now switch to the Kuraizeru configuration. Please open Kuraizeru in a separate window.

Kuraizeru Configuration

  1. Log in with an administrator account and open "System > SAML Integration".
    04.png

  2. Configure each item under "SAML General Settings" and "IdP Settings" as follows.
    SSO (Single Sign-On) Setting Either of the "Enabled" options
    Note: "Enabled (Password login enabled)" is recommended while configuring SAML
    IdP Information to Use NameID
    Account Information to Use Login Name (Email address)
    Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Endpoint URL The "IdP URL" obtained from TrustLogin
    Certificate Paste the entire contents of the certificate obtained from TrustLogin

    05.png
  3. Note the "Entity ID" and "ACS URL" information under "SP Settings", and click the "Next" button.
    06.png

  4. On the next screen, click the "Execute" button.

Return to the TrustLogin admin page again.

TrustLogin Admin Page Configuration (Continued)

  1. Configure each item under "Service Provider Settings" with the Kuraizeru information as follows.
    Entity ID The "Entity ID" obtained from Kuraizeru
    ACS URL for the Service The "ACS URL" obtained from Kuraizeru

    07.png

  2. Save the settings using the "Register" button.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. Select "Kuraizeru (SAML)" on the "Register App" screen, and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "Kuraizeru (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.