Safie SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Safie is required.

  • When a new user is created via SAML JIT, the username is created using the email address. To change it, this must be done from the administrator's user management.
  • Please refer to the manual provided by Safie for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Safie (SAML)".
    02.png

  3. Note the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. Convert the extension of the downloaded certificate file from ".txt" to ".cer".

Now, switch to configuring Safie.
Do not click the "Register" button yet — open Safie in a separate window.

Safie Settings

  1. Open Safie Manager with an account that has full administrator privileges, and click "Admin Settings > SSO / Directory Integration Settings > Issue Company-specific Authentication ID".
    04.png

  2. Click "Issue".
    05-2.png

  3. Configure each item as follows, then check "Enable SSO at the same time as configuration" and click "Save".
    SSO URL(ACS) Copy the value and note it down
    SSO Entity ID Copy the value and note it down
    Identity Provider Login Page URL The "Identity Provider URL" obtained from TrustLogin
    Identity Provider Identifier URL

    The "Issuer/Entity ID" obtained from TrustLogin

    Certificate File The "certificate" obtained from TrustLogin, converted to a CER file

    06.png

  4. If you open "Admin Settings > SSO / Directory Integration Settings" again, you can view the "SSO Login Information". This information is required when logging in via SP-Initiated SSO or when logging in with Safie's native mobile app. Please note it down if needed.
    08.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "SSO Entity ID" obtained from Safie
    ACS URL to the Service The "SSO URL(ACS)" obtained from Safie

    07.png

  2. Save by clicking the "Save" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Safie (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "Safie (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

Safie SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Safie is required.

  • When a new user is created via SAML JIT, the username is created using the email address. To change it, this must be done from the administrator's user management.
  • Please refer to the manual provided by Safie for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Safie (SAML)".
    02.png

  3. Note the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

  4. Convert the extension of the downloaded certificate file from ".txt" to ".cer".

Now, switch to configuring Safie.
Do not click the "Register" button yet — open Safie in a separate window.

Safie Settings

  1. Open Safie Manager with an account that has full administrator privileges, and click "Admin Settings > SSO / Directory Integration Settings > Issue Company-specific Authentication ID".
    04.png

  2. Click "Issue".
    05-2.png

  3. Configure each item as follows, then check "Enable SSO at the same time as configuration" and click "Save".
    SSO URL(ACS) Copy the value and note it down
    SSO Entity ID Copy the value and note it down
    Identity Provider Login Page URL The "Identity Provider URL" obtained from TrustLogin
    Identity Provider Identifier URL

    The "Issuer/Entity ID" obtained from TrustLogin

    Certificate File The "certificate" obtained from TrustLogin, converted to a CER file

    06.png

  4. If you open "Admin Settings > SSO / Directory Integration Settings" again, you can view the "SSO Login Information". This information is required when logging in via SP-Initiated SSO or when logging in with Safie's native mobile app. Please note it down if needed.
    08.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The "SSO Entity ID" obtained from Safie
    ACS URL to the Service The "SSO URL(ACS)" obtained from Safie

    07.png

  2. Save by clicking the "Save" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Safie (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "Safie (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.