Asana SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Asana is required.

  • SAML SSO is only available to users with an email address in a membership domain associated with the organization.
  • With SAML JIT, only the email address is linked. The user's full name, etc. must be entered manually.
  • For the latest setup instructions, please refer to the manual provided by Asana.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App


TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Asana (SAML)".
    Asana.png


  3. Make a note of the "Identity Provider URL" value under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03

  4. Click the "Register" button to save.

Asana Settings

  1. Log in to Asana as a super admin user and open the admin console.
    Asana02.png

  2. Open "Security>SAML authentication".
    Asana03.png

  3. Configure each item as follows, and finally save by clicking the "Save Changes" button.
    SAML Options

    Select "Optional" or "Required for all members except guest accounts"
    Note: We recommend selecting "Optional" when configuring SAML.

    Sign-in Page URL The "Identity Provider URL" obtained from TrustLogin
    X.509 Certificate The "Certificate" obtained from TrustLogin

    Asana04.png

    TrustLogin User Settings

    ① When a user adds the app from My Page

    1. Click the "Add App" button on "My Page".
    2. On the "Register App" screen, select "Asana (SAML)" and click the "Next" button in the upper right of the screen.
    3. If you want to change the "Display Name", enter it, then click the "Register" button.

    ②When an administrator adds members

    1. Search for and click the "Asana (SAML)" app in the "Admin Page > App" menu.
    2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Asana SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Asana is required.

  • SAML SSO is only available to users with an email address in a membership domain associated with the organization.
  • With SAML JIT, only the email address is linked. The user's full name, etc. must be entered manually.
  • For the latest setup instructions, please refer to the manual provided by Asana.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App


TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Asana (SAML)".
    Asana.png


  3. Make a note of the "Identity Provider URL" value under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03

  4. Click the "Register" button to save.

Asana Settings

  1. Log in to Asana as a super admin user and open the admin console.
    Asana02.png

  2. Open "Security>SAML authentication".
    Asana03.png

  3. Configure each item as follows, and finally save by clicking the "Save Changes" button.
    SAML Options

    Select "Optional" or "Required for all members except guest accounts"
    Note: We recommend selecting "Optional" when configuring SAML.

    Sign-in Page URL The "Identity Provider URL" obtained from TrustLogin
    X.509 Certificate The "Certificate" obtained from TrustLogin

    Asana04.png

    TrustLogin User Settings

    ① When a user adds the app from My Page

    1. Click the "Add App" button on "My Page".
    2. On the "Register App" screen, select "Asana (SAML)" and click the "Next" button in the upper right of the screen.
    3. If you want to change the "Display Name", enter it, then click the "Register" button.

    ②When an administrator adds members

    1. Search for and click the "Asana (SAML)" app in the "Admin Page > App" menu.
    2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.