|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
- Search on the "Register Company App" screen and select "GlassFrog (SAML)".
- Download the metadata using the "Download Metadata" button under "Identity Provider Information."
Now, switch to configuring the GlassFrog side.
Do not click the "Register" button yet — open GlassFrog in a separate window.
GlassFrog Settings
- Log in with an Admin-privileged account and open "Admin > Organization Settings > SAML Settings" from the left menu.
- Configure each item as follows, then save with the "Update SAML settings" button.
CONSUMER URL Copy the value and note it down ISSUER Copy the value and note it down CONFIGURE USING Select "Metadata File" and upload the "metadata" you downloaded from TrustLogin using the "Choose File" button GLASSFROG ACCOUNT CREATION Select "" Only allow login via SSO Checking this box restricts login to SAML SSO only. Even if you plan to enable this restriction, we recommend leaving it unchecked here and changing it only after you have confirmed that SAML SSO works successfully and notified your users.
Even when this restriction is enabled, Admin users can still log in with their GlassFrog ID/password.
- Click the "Enable" button under "Single Sign-On Status" to enable SAML.
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure the "Service Provider Settings" as follows.
Entity ID The "ISSUER" obtained from GlassFrog ACS URL for the Service The "CONSUMER URL" obtained from GlassFrog
- Click the "Register" button to save.
TrustLogin User Settings
① When a User Adds the App via My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "GlassFrog (SAML)" and click the "Next" button at the top right of the screen.
- If you want to change the "Display Name," enter it, then click the "Register" button.
②When an Administrator Adds a Member
- Search for and click the "GlassFrog (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.