How to Configure SAML JIT for SOLANOWA

Item

Details

Pre-check

  • Advance configuration is required in SOLANOWA.
  • When a new user is created via SAML JIT, the username is created using the email address. If you want to change it, the administrator must change it manually.
  • For the latest setup instructions, please refer to the manual provided by SOLANOWA.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: If you are using client authentication, SSO is not available on iOS - Native App or Android - Native App.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "SOLANOWA (SAML)".
    SOLANOWA01.png


  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to configuring SOLANOWA.
Do not click the "Register" button yet — open SOLANOWA in a separate window.

SOLANOWA Settings

  1. Log in to the SOLANOWA admin screen and click "SSO > New IdP Registration".
    SOLANOWA02.png

  2. Configure the settings as follows, then click the "Register New" button to save the settings.
    IdP Name Any name of your choice
    Drop files here to upload Upload the metadata you saved from TrustLogin

    SOLANOWA03.png

  3. After clicking the button, the "SAML Integration Details / Edit" screen will appear. Use the copy button to note down the "ACS Endpoint" and "Authentication Start URL", then click "Edit".
    SOLANOWA04.png

  4. Select either "SSO and ID/Password Authentication" or "SSO Authentication Only".
    Note: While configuring SAML, we recommend keeping it set to "SSO and ID/Password Authentication" and switching to "SSO Authentication Only" after confirming the connection.
    SOLANOWA06.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL The "Authentication Start URL" you noted from SOLANOWA
    Entity ID The "Authentication Start URL" you noted from SOLANOWA
    ACS URL to the Service The "ACS Endpoint" you noted from SOLANOWA

    SOLANOWA05.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "SOLANOWA (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

② When an administrator adds members

  1. Search for and click the "SOLANOWA (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

How to Configure SAML JIT for SOLANOWA

Item

Details

Pre-check

  • Advance configuration is required in SOLANOWA.
  • When a new user is created via SAML JIT, the username is created using the email address. If you want to change it, the administrator must change it manually.
  • For the latest setup instructions, please refer to the manual provided by SOLANOWA.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP-side Configuration

Configured by the administrator

Request configuration from the SP

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verified Operation by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: If you are using client authentication, SSO is not available on iOS - Native App or Android - Native App.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "SOLANOWA (SAML)".
    SOLANOWA01.png


  3. Download the metadata using the "Download Metadata" button under "Identity Provider Information".03.png

Now, switch to configuring SOLANOWA.
Do not click the "Register" button yet — open SOLANOWA in a separate window.

SOLANOWA Settings

  1. Log in to the SOLANOWA admin screen and click "SSO > New IdP Registration".
    SOLANOWA02.png

  2. Configure the settings as follows, then click the "Register New" button to save the settings.
    IdP Name Any name of your choice
    Drop files here to upload Upload the metadata you saved from TrustLogin

    SOLANOWA03.png

  3. After clicking the button, the "SAML Integration Details / Edit" screen will appear. Use the copy button to note down the "ACS Endpoint" and "Authentication Start URL", then click "Edit".
    SOLANOWA04.png

  4. Select either "SSO and ID/Password Authentication" or "SSO Authentication Only".
    Note: While configuring SAML, we recommend keeping it set to "SSO and ID/Password Authentication" and switching to "SSO Authentication Only" after confirming the connection.
    SOLANOWA06.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL The "Authentication Start URL" you noted from SOLANOWA
    Entity ID The "Authentication Start URL" you noted from SOLANOWA
    ACS URL to the Service The "ACS Endpoint" you noted from SOLANOWA

    SOLANOWA05.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "SOLANOWA (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

② When an administrator adds members

  1. Search for and click the "SOLANOWA (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.