How to Configure SAML Authentication for Brushup

Item

Details

Preliminary Checks

  • Advance configuration in Brushup is required.

  • You must create an account in Brushup using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by Brushup.

  • The SAML feature is available with Brushup's Enterprise plan.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, click here

SP-side configuration

Configured by the administrator

Request the SP to configure

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning(account management possible in TrustLogin; user deletion not supported)

None (create accounts in each system)

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verification status by device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app internal browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app internal browser

Android - Native app

Note: iPad app only.

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Brushup (SAML)."
    Brushup.png

  3. Note the value of the "IdP URL" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.03__2_.pngNow, switch to the configuration on the Brushup side. Do not click the "Register" button yet — open Brushup in a separate window.

Brushup Configuration

  1. Log in to Brushup and select "Security Settings" from the profile icon.
    Brushup02.png

  2. Open the "SAML Authentication" tab and check "Enable SAML Authentication."
    Brushup03.png

  3. Configure each item as follows, then click the "Save" button to save.
    Identity Provider Login URL

    The "IdP URL" obtained from TrustLogin

    URL to redirect to after logout https://portal.trustlogin.com/
    Public key certificate used by the Identity Provider for signing The contents of the "Certificate" obtained from TrustLogin
    User Identifier Email address
    Service Provider Metadata Click the download button to download the metadata
    Allow use of the Brushup login screen Select according to your company's policy.
    Enable emergency login URL

    Select according to your company's policy.

    Note: We recommend keeping this enabled during SAML configuration and noting down the emergency login URL.


    Brushup04.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. In "Service Provider Settings," use the "Select Metadata" button to upload the metadata downloaded from Brushup.
    Brushup05.png
  2. Click the "Register" button to save.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "Brushup (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

②When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "Brushup (SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.

SSO Authentication Method for the Native App

Brushup supports a native app for iOS (Note: iPad only). If you use the native app, you can access it using the method below.

  1. Download the Brushup native app.

  2. On the login screen, enter your "Company Code" and "Email Address or Account ID," then click "Log In."Brushup06.png

  3. You will be redirected to the TrustLogin login screen. Log in to TrustLogin and use the app. (Note: If TrustLogin is already open, you will not be redirected to the login screen.)



How to Configure SAML Authentication for Brushup

Item

Details

Preliminary Checks

  • Advance configuration in Brushup is required.

  • You must create an account in Brushup using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by Brushup.

  • The SAML feature is available with Brushup's Enterprise plan.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, click here

SP-side configuration

Configured by the administrator

Request the SP to configure

Provisioning

Supports provisioning via API (account management possible in TrustLogin)

Supports SAML JIT provisioning(account management possible in TrustLogin; user deletion not supported)

None (create accounts in each system)

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verification status by device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app internal browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app internal browser

Android - Native app

Note: iPad app only.

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Brushup (SAML)."
    Brushup.png

  3. Note the value of the "IdP URL" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.03__2_.pngNow, switch to the configuration on the Brushup side. Do not click the "Register" button yet — open Brushup in a separate window.

Brushup Configuration

  1. Log in to Brushup and select "Security Settings" from the profile icon.
    Brushup02.png

  2. Open the "SAML Authentication" tab and check "Enable SAML Authentication."
    Brushup03.png

  3. Configure each item as follows, then click the "Save" button to save.
    Identity Provider Login URL

    The "IdP URL" obtained from TrustLogin

    URL to redirect to after logout https://portal.trustlogin.com/
    Public key certificate used by the Identity Provider for signing The contents of the "Certificate" obtained from TrustLogin
    User Identifier Email address
    Service Provider Metadata Click the download button to download the metadata
    Allow use of the Brushup login screen Select according to your company's policy.
    Enable emergency login URL

    Select according to your company's policy.

    Note: We recommend keeping this enabled during SAML configuration and noting down the emergency login URL.


    Brushup04.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. In "Service Provider Settings," use the "Select Metadata" button to upload the metadata downloaded from Brushup.
    Brushup05.png
  2. Click the "Register" button to save.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page," click the "Add App" button.
  2. On the "Register App" screen, select "Brushup (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

②When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "Brushup (SAML)" app.
  2. Click "Add Member," select the users to add from the member list, and click the "Register" button to add them.

SSO Authentication Method for the Native App

Brushup supports a native app for iOS (Note: iPad only). If you use the native app, you can access it using the method below.

  1. Download the Brushup native app.

  2. On the login screen, enter your "Company Code" and "Email Address or Account ID," then click "Log In."Brushup06.png

  3. You will be redirected to the TrustLogin login screen. Log in to TrustLogin and use the app. (Note: If TrustLogin is already open, you will not be redirected to the login screen.)