|
Item |
Details |
|
|---|---|---|
|
Pre-check |
|
|
|
Name ID |
〇 |
Email address |
|
Custom Attribute Note: For instructions on configuring custom attributes, see here |
||
|
SP-side Settings |
〇 |
Configured by the administrator |
|
Request the SP to configure this setting |
||
|
Provisioning |
Supports provisioning via API (accounts can be managed in TrustLogin) |
|
|
Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts are created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
|
IdP-Initiated SSO |
|
|
Verified Devices |
〇 |
PC - Browser |
|
〇 |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App Internal Browser |
|
|
〇 |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App Internal Browser |
|
|
〇 |
Android - Native App |
|
TrustLogin Admin Page Settings
- Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
- On the "Corporate App Registration" screen, search and select "Notion (SAML)".
- Download the metadata from the "Download Metadata" button under "Identity Provider Information".
-
Click the "Register" button to save.
Notion Settings
- After logging in with an account that has workspace owner privileges, open "Settings" > "Settings", and if a value is set under "Allowed email domains", delete it and save.
- Open "Authentication and provisioning" and click "+ Add a domain" under Domain management.
- Enter the domain name to verify and click "Next".
Follow the displayed instructions to configure the domain's DNS records. For how to configure DNS records for your domain, please refer to your domain registrar's help documentation. Updating DNS records can take up to approximately 72 hours to take effect.
- After updating the DNS records, click "Verify" to send Notion a notification requesting confirmation of the DNS records. Once verification is complete, the domain status will be displayed as "Verified".
- Configure each SAML Single Sign-On (SSO) item as follows.
Enable SAML SSO ON Edit SAML SSO settings Click the button, and in the window that opens,
-
Note down the value of "Assertion Consumer Service (ACS) URL".
-
Check "Identity Provider Metadata XML" under "Identity Provider Details", open the metadata obtained from TrustLogin in a text editor, copy its entire contents, and paste it in.
Login method Configure according to your operational needs.
Note: If you select "SAML SSO only", logging in with a Notion account, etc. will no longer be possible, so please be careful.Automatic account creation OFF
-
Note down the value of "Assertion Consumer Service (ACS) URL".
- Note down the value of "Setup information > Workspace ID".
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Resume the TrustLogin configuration.
(On the Apps screen in the Admin Page, search by app name → open the corresponding app's detail screen → change the SAML app settings) -
Configure the "Service Provider Settings" as follows.
Login URL The "Assertion Consumer Service (ACS) URL" obtained from Notion Entity ID The "Workspace ID" obtained from Notion ACS URL for the service The "Assertion Consumer Service (ACS) URL" obtained from Notion
- Click the "Register" button to save.
TrustLogin User Settings
(1) When a user adds the app from My Page
- Click the "Add App" button on "My Page".
- On the "App Registration" screen, select "Notion (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it, then click the "Register" button.
(2) When an administrator adds a member
- In the "Admin Page > Apps" menu, search for the "Notion (SAML)" app and click it.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.