How to Configure SAML Authentication for HiTTO

Item

Details

Prerequisites

  • Prior configuration on the HiTTO side is required.

  • You must create an account in HiTTO using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by HiTTO.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports API-based provisioning (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app internal browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app internal browser

Android - Native app

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search and select "HiTTO (SAML)".
    02.png

  3. Under "Identity Provider Information", download the metadata using the "Download Metadata" button.
    03.png

At this point, switch to the HiTTO settings.
Do not click the "Register" button yet; open HiTTO in a separate window.

HiTTO Settings

  1. Log in with company administrator privileges, and open "SAML SSO Integration Settings" from the icon in the lower left.
    04.png

  2. Configure each item as follows.
    SAML SSO Settings Upload the "metadata" obtained from TrustLogin using the "Choose File" button
    Button Label Specify any string for the label of the SSO login button on the login page (optional)
    Enable SAML SSO Turn the toggle ON
    Service Provider Entity ID (Audience) Copy and note the value
    Assertion Consumer Service URL (Recipient) Copy and note the value

    05.png

    Example of the SSO login button display when "TrustLogin" is specified for the "Button Label"
    07.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Service Provider Entity ID (Audience)" obtained from HiTTO
    ACS URL for the Service The "Assertion Consumer Service URL (Recipient)" obtained from HiTTO

    06.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "HiTTO (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "HiTTO (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for HiTTO

Item

Details

Prerequisites

  • Prior configuration on the HiTTO side is required.

  • You must create an account in HiTTO using the same email address as your TrustLogin account.

  • For the latest configuration steps, please refer to the manual provided by HiTTO.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports API-based provisioning (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app internal browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app internal browser

Android - Native app

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search and select "HiTTO (SAML)".
    02.png

  3. Under "Identity Provider Information", download the metadata using the "Download Metadata" button.
    03.png

At this point, switch to the HiTTO settings.
Do not click the "Register" button yet; open HiTTO in a separate window.

HiTTO Settings

  1. Log in with company administrator privileges, and open "SAML SSO Integration Settings" from the icon in the lower left.
    04.png

  2. Configure each item as follows.
    SAML SSO Settings Upload the "metadata" obtained from TrustLogin using the "Choose File" button
    Button Label Specify any string for the label of the SSO login button on the login page (optional)
    Enable SAML SSO Turn the toggle ON
    Service Provider Entity ID (Audience) Copy and note the value
    Assertion Consumer Service URL (Recipient) Copy and note the value

    05.png

    Example of the SSO login button display when "TrustLogin" is specified for the "Button Label"
    07.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Service Provider Entity ID (Audience)" obtained from HiTTO
    ACS URL for the Service The "Assertion Consumer Service URL (Recipient)" obtained from HiTTO

    06.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "HiTTO (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "HiTTO (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.