How to Configure SAML Authentication for invoiceAgent Document Management

Item

Details

Prerequisites

  • Prior configuration on the invoiceAgent Document Management side is required.

  • For the latest configuration steps, please refer to the manual provided by invoiceAgent Document Management.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, click here

SP-side configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports API-based provisioning (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)
Note: For instructions on how to configure provisioning, click here

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app internal browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app internal browser

Android - Native app

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search and select "invoiceAgent Document Management (SAML)".
    02.png

  3. Note the value of "IdP URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now, switch to configuring the invoiceAgent Document Management side.
Do not click the "Register" button yet; open invoiceAgent Document Management in a separate window.

invoiceAgent Document Management Configuration

  1. Open "Users and Groups > SAML Authentication" and click the "+" mark.
    04.png

  2. Configure each item as follows, then save by clicking the "OK" button.
    Domain name Any name of your choice
    External authentication name Any name of your choice
    Enable SAML authentication Check this box
    Note: Please be aware that logging in with a normal password will no longer be possible.
    Target URL The "IdP URL" obtained from TrustLogin
    Certificate The contents of the "certificate" obtained from TrustLogin
    Download metadata Click the button to download the metadata

    05.png

  3. Open "User Management" and switch the "Domain" dropdown to the "domain name" you configured in the previous step.
    06.png

  4. Add users individually or by import.
    Set the "username" to the same email address used in TrustLogin.
    07.png


Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. Upload the "metadata" obtained from invoiceAgent Document Management to "Metadata" under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "invoiceAgent Document Management (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "invoiceAgent Document Management (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

Note: If, in the unlikely event, an error in the SAML authentication configuration prevents you from logging in to invoiceAgent Document Management,
you can log in with a password by adding "?nosaml" to the end of the login URL.
Example: https://xxxxx.spa-cloud.com/spa/?nosaml

How to Configure SAML Authentication for invoiceAgent Document Management

Item

Details

Prerequisites

  • Prior configuration on the invoiceAgent Document Management side is required.

  • For the latest configuration steps, please refer to the manual provided by invoiceAgent Document Management.

Name ID

Email address

Custom attribute Note: For instructions on how to configure custom attributes, click here

SP-side configuration

Configured by the administrator

Request configuration from the SP

Provisioning

Supports API-based provisioning (accounts can be managed in TrustLogin)

Supports SAML JIT provisioning (accounts can be managed in TrustLogin; user deletion not supported)

None (accounts are created in each system)
Note: For instructions on how to configure provisioning, click here

Access method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop app

iOS - Standard browser (Safari)

iOS - TrustLogin mobile app internal browser

iOS - Native app

Android - Standard browser (Chrome)

Android - TrustLogin mobile app internal browser

Android - Native app

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. On the "Register Enterprise App" screen, search and select "invoiceAgent Document Management (SAML)".
    02.png

  3. Note the value of "IdP URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png

Now, switch to configuring the invoiceAgent Document Management side.
Do not click the "Register" button yet; open invoiceAgent Document Management in a separate window.

invoiceAgent Document Management Configuration

  1. Open "Users and Groups > SAML Authentication" and click the "+" mark.
    04.png

  2. Configure each item as follows, then save by clicking the "OK" button.
    Domain name Any name of your choice
    External authentication name Any name of your choice
    Enable SAML authentication Check this box
    Note: Please be aware that logging in with a normal password will no longer be possible.
    Target URL The "IdP URL" obtained from TrustLogin
    Certificate The contents of the "certificate" obtained from TrustLogin
    Download metadata Click the button to download the metadata

    05.png

  3. Open "User Management" and switch the "Domain" dropdown to the "domain name" you configured in the previous step.
    06.png

  4. Add users individually or by import.
    Set the "username" to the same email address used in TrustLogin.
    07.png


Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. Upload the "metadata" obtained from invoiceAgent Document Management to "Metadata" under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Configuration

① When a user adds the app from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "invoiceAgent Document Management (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it, then click the "Register" button.

② When an administrator adds members

  1. In the "Admin Page > Apps" menu, search for and click the "invoiceAgent Document Management (SAML)" app.
  2. Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.

Note: If, in the unlikely event, an error in the SAML authentication configuration prevents you from logging in to invoiceAgent Document Management,
you can log in with a password by adding "?nosaml" to the end of the login URL.
Example: https://xxxxx.spa-cloud.com/spa/?nosaml