How to Configure SAML Authentication for GlassFrog

Item

Details

Prior Confirmation

  • Prior configuration in GlassFrog is required.

  • You must create a GlassFrog account using the same email address as your TrustLogin account.

  • Please refer to the manual provided by GlassFrog for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)
Note: For instructions on configuring provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "GlassFrog (SAML)".
    02.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information."
    03.png

Now, switch to configuring the GlassFrog side.
Do not click the "Register" button yet — open GlassFrog in a separate window.

GlassFrog Settings

  1. Log in with an Admin-privileged account and open "Admin > Organization Settings > SAML Settings" from the left menu.
    04.png

  2. Configure each item as follows, then save with the "Update SAML settings" button.
    CONSUMER URL Copy the value and note it down
    ISSUER Copy the value and note it down
    CONFIGURE USING Select "Metadata File" and upload the "metadata" you downloaded from TrustLogin using the "Choose File" button
    GLASSFROG ACCOUNT CREATION Select ""
    Only allow login via SSO Checking this box restricts login to SAML SSO only. Even if you plan to enable this restriction, we recommend leaving it unchecked here and changing it only after you have confirmed that SAML SSO works successfully and notified your users.
    Even when this restriction is enabled, Admin users can still log in with their GlassFrog ID/password.

    05.png

  3. Click the "Enable" button under "Single Sign-On Status" to enable SAML.
    06.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "ISSUER" obtained from GlassFrog
    ACS URL for the Service The "CONSUMER URL" obtained from GlassFrog

    07.png

  2. Click the "Register" button to save.

TrustLogin User Settings

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "GlassFrog (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

②When an Administrator Adds a Member

  1. Search for and click the "GlassFrog (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for GlassFrog

Item

Details

Prior Confirmation

  • Prior configuration in GlassFrog is required.

  • You must create a GlassFrog account using the same email address as your TrustLogin account.

  • Please refer to the manual provided by GlassFrog for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)
Note: For instructions on configuring provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "GlassFrog (SAML)".
    02.png

  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information."
    03.png

Now, switch to configuring the GlassFrog side.
Do not click the "Register" button yet — open GlassFrog in a separate window.

GlassFrog Settings

  1. Log in with an Admin-privileged account and open "Admin > Organization Settings > SAML Settings" from the left menu.
    04.png

  2. Configure each item as follows, then save with the "Update SAML settings" button.
    CONSUMER URL Copy the value and note it down
    ISSUER Copy the value and note it down
    CONFIGURE USING Select "Metadata File" and upload the "metadata" you downloaded from TrustLogin using the "Choose File" button
    GLASSFROG ACCOUNT CREATION Select ""
    Only allow login via SSO Checking this box restricts login to SAML SSO only. Even if you plan to enable this restriction, we recommend leaving it unchecked here and changing it only after you have confirmed that SAML SSO works successfully and notified your users.
    Even when this restriction is enabled, Admin users can still log in with their GlassFrog ID/password.

    05.png

  3. Click the "Enable" button under "Single Sign-On Status" to enable SAML.
    06.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "ISSUER" obtained from GlassFrog
    ACS URL for the Service The "CONSUMER URL" obtained from GlassFrog

    07.png

  2. Click the "Register" button to save.

TrustLogin User Settings

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "GlassFrog (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

②When an Administrator Adds a Member

  1. Search for and click the "GlassFrog (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.