GlassFrog SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in GlassFrog is required.

  • The email address will be set as the username for users newly created via SAML JIT. If you want to change it, please have the user or administrator change it after user registration.

  • If you want to grant Admin privileges to a user newly created via SAML JIT, the administrator should grant this on the Admin Page after user registration.

  • For the latest setup instructions, please check the manual provided by GlassFrog.

Name ID

〇

Email address

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request the SP to configure

Provisioning

API-based provisioning supported (account management available in TrustLogin)
〇

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Verified Operation by Device

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "GlassFrog (SAML)".
    02.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring GlassFrog.
Do not click the "Register" button yet — open GlassFrog in a separate window.

GlassFrog Settings

  1. Log in with an Admin account and open "Admin > Organization Settings > SAML Settings" in the left menu.
    04.png

  2. Configure each item as follows, and save by clicking the "Update SAML settings" button.
    CONSUMER URL Copy the value and make a note of it
    ISSUER Copy the value and make a note of it
    CONFIGURE USING Select "Metadata File" and upload the "metadata" downloaded from TrustLogin using the "Choose File" button
    GLASSFROG ACCOUNT CREATION Select "Automatically create GlassFrog accounts"
    Only allow login via SSO Checking this restricts the login method to SAML SSO only. Even if you plan to restrict it, we recommend leaving this unchecked here and enabling it only after you have confirmed that SAML SSO works successfully and notified your users.
    Even when this restriction is enabled, Admin users can still log in with their GlassFrog ID/password.

    05jit.png
  3. Click the "Enable" button under "Single Sign-On Status" to enable SAML.
    06.png


Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "ISSUER" obtained from GlassFrog
    ACS URL to Service The "CONSUMER URL" obtained from GlassFrog

    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "GlassFrog (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "GlassFrog (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Was this article helpful?

Related articles

  1. ホーム
  2. SAML JIT App Configuration
  3. GlassFrog SAML JIT Setup Guide

GlassFrog SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in GlassFrog is required.

  • The email address will be set as the username for users newly created via SAML JIT. If you want to change it, please have the user or administrator change it after user registration.

  • If you want to grant Admin privileges to a user newly created via SAML JIT, the administrator should grant this on the Admin Page after user registration.

  • For the latest setup instructions, please check the manual provided by GlassFrog.

Name ID

〇

Email address

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

〇

Configured by the administrator

Request the SP to configure

Provisioning

API-based provisioning supported (account management available in TrustLogin)
〇

SAML JIT provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Verified Operation by Device

〇

PC - Browser

ー

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "GlassFrog (SAML)".
    02.png

  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".
    03.png

Now, switch to configuring GlassFrog.
Do not click the "Register" button yet — open GlassFrog in a separate window.

GlassFrog Settings

  1. Log in with an Admin account and open "Admin > Organization Settings > SAML Settings" in the left menu.
    04.png

  2. Configure each item as follows, and save by clicking the "Update SAML settings" button.
    CONSUMER URL Copy the value and make a note of it
    ISSUER Copy the value and make a note of it
    CONFIGURE USING Select "Metadata File" and upload the "metadata" downloaded from TrustLogin using the "Choose File" button
    GLASSFROG ACCOUNT CREATION Select "Automatically create GlassFrog accounts"
    Only allow login via SSO Checking this restricts the login method to SAML SSO only. Even if you plan to restrict it, we recommend leaving this unchecked here and enabling it only after you have confirmed that SAML SSO works successfully and notified your users.
    Even when this restriction is enabled, Admin users can still log in with their GlassFrog ID/password.

    05jit.png
  3. Click the "Enable" button under "Single Sign-On Status" to enable SAML.
    06.png


Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "ISSUER" obtained from GlassFrog
    ACS URL to Service The "CONSUMER URL" obtained from GlassFrog

    07.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "GlassFrog (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "GlassFrog (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Related articles