How to Configure SAML Authentication for Tocaro

Item

Details

Prerequisites

  • Prior configuration on Tocaro is required.

  • You must create an account on Tocaro using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by Tocaro.

Name ID

Email address

Custom attribute Note: For how to configure a custom attribute, see here

SP-Side Configuration

Configured by the administrator

Request the SP to configure the settings

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; users cannot be deleted)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App



TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Corporate App Registration" screen, search for and select "Tocaro (SAML)".
    Tocaro.png

  3. Note the value of "IdP URL" under "IdP Information", and download the certificate using the "Get Certificate" button.
    03.png

Now let's move on to configuration on the Tocaro side. Please open Tocaro in a separate window.


Tocaro Configuration

  1. Open the admin dashboard and go to "Security > Single Sign-On".
    04.png

  2. Configure each item in the single sign-on settings as follows, then click the "Save" button.
    Single Sign-On Setting Switch to "Enabled"
    IdP Login URL The "IdP URL" obtained from TrustLogin
    IdP Public Key Certificate Paste the entire contents of the "Certificate" obtained from TrustLogin

    05.png

  3. Obtain and note the values of "Assertion Consumer URL" and "Entity ID" from "SAML service provider detail".
    06.png

Now let's return to the TrustLogin configuration.

TrustLogin Admin Page Configuration (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from Tocaro
    ACS URL for Service The "Assertion Consumer URL" obtained from Tocaro

    07.png
  2. Click the "Register" button to save.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "App Registration" screen, select "Tocaro (SAML)" and click the "Next" button in the upper right of the screen.
  3. Enter a "Display Name" if you want to change it, and click the "Register" button.

② When an administrator adds members

  1. On the "Admin Page > Apps" menu, search for and click the "Tocaro (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Tocaro

Item

Details

Prerequisites

  • Prior configuration on Tocaro is required.

  • You must create an account on Tocaro using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by Tocaro.

Name ID

Email address

Custom attribute Note: For how to configure a custom attribute, see here

SP-Side Configuration

Configured by the administrator

Request the SP to configure the settings

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; users cannot be deleted)

None (accounts are created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App



TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Corporate App Registration" screen, search for and select "Tocaro (SAML)".
    Tocaro.png

  3. Note the value of "IdP URL" under "IdP Information", and download the certificate using the "Get Certificate" button.
    03.png

Now let's move on to configuration on the Tocaro side. Please open Tocaro in a separate window.


Tocaro Configuration

  1. Open the admin dashboard and go to "Security > Single Sign-On".
    04.png

  2. Configure each item in the single sign-on settings as follows, then click the "Save" button.
    Single Sign-On Setting Switch to "Enabled"
    IdP Login URL The "IdP URL" obtained from TrustLogin
    IdP Public Key Certificate Paste the entire contents of the "Certificate" obtained from TrustLogin

    05.png

  3. Obtain and note the values of "Assertion Consumer URL" and "Entity ID" from "SAML service provider detail".
    06.png

Now let's return to the TrustLogin configuration.

TrustLogin Admin Page Configuration (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "Entity ID" obtained from Tocaro
    ACS URL for Service The "Assertion Consumer URL" obtained from Tocaro

    07.png
  2. Click the "Register" button to save.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "App Registration" screen, select "Tocaro (SAML)" and click the "Next" button in the upper right of the screen.
  3. Enter a "Display Name" if you want to change it, and click the "Register" button.

② When an administrator adds members

  1. On the "Admin Page > Apps" menu, search for and click the "Tocaro (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.