|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For instructions on how to configure a custom attribute, click here If you want to use SSO integration with a login ID, please see here. |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Ashita no Cloud (SAML)".
-
Note the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
Now, switch to configuring the Ashita no Cloud side.
Do not click the "Register" button yet; please open Ashita no Cloud in a separate window.
Ashita no Cloud Settings
- Log in with an account that has administrator privileges and select "System Settings > Company Information Settings".
- Scroll down to the bottom of the "Company Information - Edit" screen and click "Edit".
- In the "Single Sign-On (SAML 2.0) Settings" section, select "Use", configure the settings as follows, and save by clicking "Update".
Identity Provider Name Any name of your choice Note: In this example, "TrustLogin" is used. Application ID Copy and make a note of it Response URL Copy and make a note of it Endpoint URL Enter the "Identity Provider URL" you noted from TrustLogin Redirect URL After Logout https://portal.trustlogin.com/ Certificate Copy and paste the contents of the "certificate" you downloaded from TrustLogin Allow Normal Login for All Users Checking this enables normal login (login using an ID and password).
If you want to restrict login to SSO only, we recommend unchecking this only after confirming SSO works successfully and notifying users.
You can also individually select which users are allowed to use normal login.
- Open "Employee Information Management > Employee Information > Employee List" and select an employee. Enter the email address registered in TrustLogin under "System Integration Information > Single Sign-On" and update the information.
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "Application ID" you noted from Ashita no Cloud ACS URL to Service The "Response URL" you noted from Ashita no Cloud
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a User Adds the App from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Ashita no Cloud (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an Administrator Adds Members
- Search for and click the "Ashita no Cloud (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.