How to Configure SAML Authentication for My Redmine

Item

Details

Prerequisites

  • Prior configuration on My Redmine is required.

  • You must create an account on My Redmine using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by My Redmine.

Name ID

Email address

Custom attribute Note: For how to configure a custom attribute, see here

SP-Side Configuration

Configured by the administrator

Request the SP to configure the settings

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; users cannot be deleted)

None (accounts are created in each system)
Note: For how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Corporate App Registration" screen, search for and select "My Redmine (SAML)".
    02.png

  3. Note the "IdP URL" and "Issuer/Entity ID" values under "IdP Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. In the blank fields for "Entity ID" and "ACS URL for Service" under "Service Provider Settings", enter your My Redmine account name.
    If your login URL is https://xxxxx.cloud.redmine.jp/, enter xxxxx.
    04.png

  5. Click the "Register" button to save.

  6. Change the file extension of the downloaded certificate to [.cer] and open the file.
    05.png
    06.png

    Note the value of the "Thumbprint" field on the "Details" tab.
    07.png

My Redmine Configuration

  1. Log in with the system administrator account and open "Administration > SAML Authentication".
    08.png

  2. Configure each item as follows and click the "Apply" button to save.
    Enable SAML Authentication ON
    Login Button Display This is the display name of the SAML login button on the login page.
    You can change it to any name you like.
    10.png
    Hide Redmine's Login Form Turning this ON hides the login ID and password fields on the login screen. Please note that this disables the ability to log in with a Redmine login ID/password.
    Automatically Create User on SAML Authentication OFF
    idp entity id

    The "Issuer/Entity ID" obtained from TrustLogin

    idp sso target url The "IdP URL" obtained from TrustLogin
    idp cert fingerprint

    The "Thumbprint" value obtained from the TrustLogin certificate

    fingerprint algorithm Select "sha1"
    Login ID uid
    Email Address Email

    09.png

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "App Registration" screen, select "My Redmine (SAML)" and click the "Next" button in the upper right of the screen.
  3. Enter a "Display Name" if you want to change it, and click the "Register" button.

② When an administrator adds members

  1. On the "Admin Page > Apps" menu, search for and click the "My Redmine (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for My Redmine

Item

Details

Prerequisites

  • Prior configuration on My Redmine is required.

  • You must create an account on My Redmine using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by My Redmine.

Name ID

Email address

Custom attribute Note: For how to configure a custom attribute, see here

SP-Side Configuration

Configured by the administrator

Request the SP to configure the settings

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; users cannot be deleted)

None (accounts are created in each system)
Note: For how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App Internal Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App Internal Browser

Android - Native App

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Corporate App Registration" screen, search for and select "My Redmine (SAML)".
    02.png

  3. Note the "IdP URL" and "Issuer/Entity ID" values under "IdP Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. In the blank fields for "Entity ID" and "ACS URL for Service" under "Service Provider Settings", enter your My Redmine account name.
    If your login URL is https://xxxxx.cloud.redmine.jp/, enter xxxxx.
    04.png

  5. Click the "Register" button to save.

  6. Change the file extension of the downloaded certificate to [.cer] and open the file.
    05.png
    06.png

    Note the value of the "Thumbprint" field on the "Details" tab.
    07.png

My Redmine Configuration

  1. Log in with the system administrator account and open "Administration > SAML Authentication".
    08.png

  2. Configure each item as follows and click the "Apply" button to save.
    Enable SAML Authentication ON
    Login Button Display This is the display name of the SAML login button on the login page.
    You can change it to any name you like.
    10.png
    Hide Redmine's Login Form Turning this ON hides the login ID and password fields on the login screen. Please note that this disables the ability to log in with a Redmine login ID/password.
    Automatically Create User on SAML Authentication OFF
    idp entity id

    The "Issuer/Entity ID" obtained from TrustLogin

    idp sso target url The "IdP URL" obtained from TrustLogin
    idp cert fingerprint

    The "Thumbprint" value obtained from the TrustLogin certificate

    fingerprint algorithm Select "sha1"
    Login ID uid
    Email Address Email

    09.png

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "App Registration" screen, select "My Redmine (SAML)" and click the "Next" button in the upper right of the screen.
  3. Enter a "Display Name" if you want to change it, and click the "Register" button.

② When an administrator adds members

  1. On the "Admin Page > Apps" menu, search for and click the "My Redmine (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.