Miro SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in Miro is required.

  • If you do not enable new user registration via SAML JIT, you must create an account in advance using the same email address as in TrustLogin. Even if new user registration is not enabled, information for already-registered users (user name) will still be updated.

  • Please refer to the manual provided by Miro for the latest configuration steps.

Name ID

〇

Email address

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)
〇

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

〇

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

〇

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

〇

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Miro (SAML)".
    02.png

  3. Make a note of the "Identity Provider URL" value in "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. Configure "Service Provider Settings" as follows.
    Entity ID [If you are not using a dedicated URL (workspacedomain.miro.com)]
    https://miro.com/

    [If you are using a dedicated URL]
    https://workspacedomain.miro.com/ORGANIZATION_ID
    ACS URL to Service [If you are not using a dedicated URL (workspacedomain.miro.com)]
    https://miro.com/sso/saml

    [If you are using a dedicated URL]
    https://workspacedomain.miro.com/sso/saml/ORGANIZATION_ID
    Note: ORGANIZATION_ID is displayed in the address bar URL when you click [Profile] > [Settings] in the upper right of the Miro dashboard.

    07.png

  5. Click the "Register" button to save.

Miro Settings

  1. Open "Settings > Menu > Enterprise Integrations" from the icon in the upper right.
    04.png

  2. Turn on the "SSO/SAML" toggle.
    05.png

  3. Configure each item as follows, and finally save by clicking the "Save" button.
    SAML Sign-in URL The "Identity Provider URL" obtained from TrustLogin
    x509 Key Authentication The contents of the "certificate" obtained from TrustLogin
    Domain Add the email domain, and follow the instructions to verify the domain by receiving an email.
    Automatically add all newly registered users with domains on the list to the Enterprise account [If you want to enable new user registration via SAML JIT]
    Turn the checkbox ON and specify the default team for newly registered users.

    [If you want to disable new user registration via SAML JIT]
    Turn the checkbox OFF
    Sync user profile photos from the IdP Turn the checkbox OFF

    06.png

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Miro (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Miro (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Was this article helpful?
  1. ホーム
  2. SAML JIT App Configuration
  3. Miro SAML JIT Setup Guide

Miro SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in Miro is required.

  • If you do not enable new user registration via SAML JIT, you must create an account in advance using the same email address as in TrustLogin. Even if new user registration is not enabled, information for already-registered users (user name) will still be updated.

  • Please refer to the manual provided by Miro for the latest configuration steps.

Name ID

〇

Email address

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)
〇

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

〇

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

〇

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

〇

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Miro (SAML)".
    02.png

  3. Make a note of the "Identity Provider URL" value in "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. Configure "Service Provider Settings" as follows.
    Entity ID [If you are not using a dedicated URL (workspacedomain.miro.com)]
    https://miro.com/

    [If you are using a dedicated URL]
    https://workspacedomain.miro.com/ORGANIZATION_ID
    ACS URL to Service [If you are not using a dedicated URL (workspacedomain.miro.com)]
    https://miro.com/sso/saml

    [If you are using a dedicated URL]
    https://workspacedomain.miro.com/sso/saml/ORGANIZATION_ID
    Note: ORGANIZATION_ID is displayed in the address bar URL when you click [Profile] > [Settings] in the upper right of the Miro dashboard.

    07.png

  5. Click the "Register" button to save.

Miro Settings

  1. Open "Settings > Menu > Enterprise Integrations" from the icon in the upper right.
    04.png

  2. Turn on the "SSO/SAML" toggle.
    05.png

  3. Configure each item as follows, and finally save by clicking the "Save" button.
    SAML Sign-in URL The "Identity Provider URL" obtained from TrustLogin
    x509 Key Authentication The contents of the "certificate" obtained from TrustLogin
    Domain Add the email domain, and follow the instructions to verify the domain by receiving an email.
    Automatically add all newly registered users with domains on the list to the Enterprise account [If you want to enable new user registration via SAML JIT]
    Turn the checkbox ON and specify the default team for newly registered users.

    [If you want to disable new user registration via SAML JIT]
    Turn the checkbox OFF
    Sync user profile photos from the IdP Turn the checkbox OFF

    06.png

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Miro (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Miro (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.