|
Item |
Details |
|
|---|---|---|
|
Preliminary Checks |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure custom attributes, click here |
||
|
SP-side configuration |
〇 |
Configured by the administrator |
|
Request the SP to configure |
||
|
Provisioning |
Supports provisioning via API (account management possible in TrustLogin) |
|
|
Supports SAML JIT provisioning(account management possible in TrustLogin; user deletion not supported) |
||
|
〇 |
None (create accounts in each system) |
|
|
Access method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verification status by device |
〇 |
PC - Browser |
|
ー |
PC - Desktop app |
|
|
〇 |
iOS - Standard browser (Safari) |
|
|
〇 |
iOS - TrustLogin mobile app internal browser |
|
|
※ |
iOS - Native app |
|
|
〇 |
Android - Standard browser (Chrome) |
|
|
〇 |
Android - TrustLogin mobile app internal browser |
|
|
ー |
Android - Native app |
|
Note: For the iOS native app, you can open the app via Safari by selecting "Open Meishi app?" → "OK."
TrustLogin Admin Page Configuration
-
Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Corporate App" screen and select "Meishi (SAML)."
- Note the values of the "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.
Now, switch to the configuration on the Meishi side.
Do not click the "Register" button yet — open Meishi in a separate window.
Meishi Configuration
- Open the "Menu > SAML Settings."
- Configure each item as follows.
Enable SAML Check the box IdP Entity ID The "Issuer/Entity ID" obtained from TrustLogin IdP SSO Service URL The "IdP URL" obtained from TrustLogin IdP Certificate The contents of the "Certificate" obtained from TrustLogin
Note the values of "ACS URL (Assertion Consumer Service URL)" and "EntityID" under "SP (Service Provider) Information."
(The "Start URL" is the URL used for SP-Initiated SSO.)
Finally, click the "Save" button to save.
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Configuration (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "EntityID" obtained from Meishi ACS URL for the service The "ACS URL (Assertion Consumer Service URL)" obtained from Meishi
- Click the "Register" button to save.
TrustLogin User Configuration
① When a user adds the app from My Page
- On "My Page," click the "Add App" button.
- On the "Register App" screen, select "Meishi (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name," enter it, then click the "Register" button.
②When an administrator adds members
- In the "Admin Page > Apps" menu, search for and click the "Meishi (SAML)" app.
- Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.