How to Configure SAML Authentication for Sairecoco

Item

Details

Prior Confirmation

  • Prior configuration in Sairecoco is required.

  • You must register the same email address for your Sairecoco login ID as the one used in TrustLogin.

  • If you are using Sairecoco without registering an email address, please check these instructions.
  • Please refer to the manual provided by Sairecoco for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Sairecoco (SAML)".
    Sairecoco.png

  3. Note down the "Identity Provider URL" and "Issuer / Entity ID" values under "Identity Provider Information," and download the certificate using the "Get Certificate" button.
    03 (1).png

Now, switch to configuring the Sairecoco side.
Do not click the "Register" button yet — open Sairecoco in a separate window.

Sairecoco Settings

  1. Log in with your Sairecoco administrator account and open "Optional Features > SSO (SAML2.0) Settings". Configure "Register Information Required for SSO Integration" as shown below, then click the "Register" button.
    Enable SSO (SAML2.0) Authentication Check the box.
    IdP Name Any name
    Entity ID The "Issuer / Entity ID" obtained from TrustLogin
    Login URL The "Identity Provider URL" obtained from TrustLogin
    Logout URL https://portal.trustlogin.com/
    X.509 Certificate The contents of the "Certificate" you obtained from TrustLogin

    Sairecoco03.png

  2. Copy and note down the values of "Sairecoco Entity ID", "Sairecoco Login URL (ACS)", and "Sairecoco Logout URL" under "Information to Configure in the IdP".Sairecoco04.png

Return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Sairecoco Entity ID" obtained from Sairecoco
    ACS URL for the Service The "Sairecoco Login URL (ACS)" obtained from Sairecoco
    Logout URL

    The "Sairecoco Logout URL" obtained from Sairecoco

    Note: Single logout is planned as a future feature addition, but it is not yet implemented and does not currently function.


    Sairecoco02.png

  2. Click the "Register" button to save.

TrustLogin User Settings

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Sairecoco (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

②When an Administrator Adds a Member

  1. Search for and click the "Sairecoco (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for Sairecoco

Item

Details

Prior Confirmation

  • Prior configuration in Sairecoco is required.

  • You must register the same email address for your Sairecoco login ID as the one used in TrustLogin.

  • If you are using Sairecoco without registering an email address, please check these instructions.
  • Please refer to the manual provided by Sairecoco for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button at the top right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Sairecoco (SAML)".
    Sairecoco.png

  3. Note down the "Identity Provider URL" and "Issuer / Entity ID" values under "Identity Provider Information," and download the certificate using the "Get Certificate" button.
    03 (1).png

Now, switch to configuring the Sairecoco side.
Do not click the "Register" button yet — open Sairecoco in a separate window.

Sairecoco Settings

  1. Log in with your Sairecoco administrator account and open "Optional Features > SSO (SAML2.0) Settings". Configure "Register Information Required for SSO Integration" as shown below, then click the "Register" button.
    Enable SSO (SAML2.0) Authentication Check the box.
    IdP Name Any name
    Entity ID The "Issuer / Entity ID" obtained from TrustLogin
    Login URL The "Identity Provider URL" obtained from TrustLogin
    Logout URL https://portal.trustlogin.com/
    X.509 Certificate The contents of the "Certificate" you obtained from TrustLogin

    Sairecoco03.png

  2. Copy and note down the values of "Sairecoco Entity ID", "Sairecoco Login URL (ACS)", and "Sairecoco Logout URL" under "Information to Configure in the IdP".Sairecoco04.png

Return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure the "Service Provider Settings" as follows.
    Entity ID The "Sairecoco Entity ID" obtained from Sairecoco
    ACS URL for the Service The "Sairecoco Login URL (ACS)" obtained from Sairecoco
    Logout URL

    The "Sairecoco Logout URL" obtained from Sairecoco

    Note: Single logout is planned as a future feature addition, but it is not yet implemented and does not currently function.


    Sairecoco02.png

  2. Click the "Register" button to save.

TrustLogin User Settings

① When a User Adds the App via My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Sairecoco (SAML)" and click the "Next" button at the top right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

②When an Administrator Adds a Member

  1. Search for and click the "Sairecoco (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.