How to Configure SAML Authentication for MINAGINE Attendance Management

Item

Details

Pre-check

  • Prior configuration in MINAGINE Attendance Management is required.

  • You must create an account in MINAGINE Attendance Management using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by MINAGINE Attendance Management.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side configuration

Configured by the administrator

Request the SP to configure the settings

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; users cannot be deleted)

None (accounts are created in each system)

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verified operation by device

PC - Browser

PC - Desktop app

iOS - Default browser (Safari)

iOS - TrustLogin mobile app in-app browser

iOS - Native app

Android - Default browser (Chrome)

Android - TrustLogin mobile app in-app browser

Android - Native app

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search and select "MINAGINE Attendance Management (SAML)".
    02.png

  3. Note the "IdP URL" and "Issuer / Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png


  4. In the Service Provider settings, enter your MINAGINE Attendance Management "contract domain" in the blank field for "ACS URL for the service".
    04.png

  5. Save by clicking the "Register" button.

MINAGINE Attendance Management Settings

  1. Log in with an administrator account, and open "Settings > System Administration > SAML Authentication Settings".
    05.png

  2. Change "Login Restriction" to "Use both normal login and SAML authentication login", and configure each item as follows. Finally, save by clicking the "Update" button.
    Login Restriction Select "Use both normal login and SAML authentication login" (recommended)

    Note: If you plan to operate using SAML authentication only for login, please change this to "Allow login using SAML authentication only" after you have verified that SAML authentication works and have notified your users.
    Certificate The contents of the "Certificate" obtained from TrustLogin
    SSO URL The "IdP URL" obtained from TrustLogin
    Fingerprint The "Issuer / Entity ID" obtained from TrustLogin
    Login URL The login URL used when logging in via SP-Initiated.
    Note it down if needed

    06.png

TrustLogin User Settings

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "MINAGINE Attendance Management (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds a member

  1. On the "Admin Page > Apps" menu, search for and click the "MINAGINE Attendance Management (SAML)" app.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for MINAGINE Attendance Management

Item

Details

Pre-check

  • Prior configuration in MINAGINE Attendance Management is required.

  • You must create an account in MINAGINE Attendance Management using the same email address as your TrustLogin account.

  • For the latest setup instructions, please refer to the manual provided by MINAGINE Attendance Management.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side configuration

Configured by the administrator

Request the SP to configure the settings

Provisioning

Supports provisioning via API (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; users cannot be deleted)

None (accounts are created in each system)

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verified operation by device

PC - Browser

PC - Desktop app

iOS - Default browser (Safari)

iOS - TrustLogin mobile app in-app browser

iOS - Native app

Android - Default browser (Chrome)

Android - TrustLogin mobile app in-app browser

Android - Native app

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search and select "MINAGINE Attendance Management (SAML)".
    02.png

  3. Note the "IdP URL" and "Issuer / Entity ID" values under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png


  4. In the Service Provider settings, enter your MINAGINE Attendance Management "contract domain" in the blank field for "ACS URL for the service".
    04.png

  5. Save by clicking the "Register" button.

MINAGINE Attendance Management Settings

  1. Log in with an administrator account, and open "Settings > System Administration > SAML Authentication Settings".
    05.png

  2. Change "Login Restriction" to "Use both normal login and SAML authentication login", and configure each item as follows. Finally, save by clicking the "Update" button.
    Login Restriction Select "Use both normal login and SAML authentication login" (recommended)

    Note: If you plan to operate using SAML authentication only for login, please change this to "Allow login using SAML authentication only" after you have verified that SAML authentication works and have notified your users.
    Certificate The contents of the "Certificate" obtained from TrustLogin
    SSO URL The "IdP URL" obtained from TrustLogin
    Fingerprint The "Issuer / Entity ID" obtained from TrustLogin
    Login URL The login URL used when logging in via SP-Initiated.
    Note it down if needed

    06.png

TrustLogin User Settings

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "MINAGINE Attendance Management (SAML)", and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds a member

  1. On the "Admin Page > Apps" menu, search for and click the "MINAGINE Attendance Management (SAML)" app.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.