|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
|
Email address If you want to use SSO integration with an email address, please see here. |
| 〇 |
Custom attribute Note: For instructions on how to configure a custom attribute, click here |
|
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
API-based Provisioning supported (account management available in TrustLogin) |
|
|
SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verified Operation by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App In-App Browser |
|
|
ー |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App In-App Browser |
|
|
ー |
Android - Native App |
|
Preparation
Add a Custom Attribute to User Information
Add Ashita no Cloud's "Login ID" information as a custom attribute in the TrustLogin member information.
【Ashita no Cloud Account Information Screen】
【TrustLogin Custom Attribute Configuration Example】
For how to configure custom attributes, please refer to the pages below. The attribute name of the custom attribute is arbitrary.
Custom Attribute Configuration Method (Individual Registration)
Custom Attribute Configuration Method (Bulk Registration)
TrustLogin Admin Page Settings
-
Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
- Search on the "Register Company App" screen and select "Ashita no Cloud (SAML)".
-
Note the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
Now, switch to configuring the Ashita no Cloud side.
Do not click the "Register" button yet; please open Ashita no Cloud in a separate window.
Ashita no Cloud Settings
- Log in with an account that has administrator privileges and select "System Settings>Company Information Settings".
- Scroll down to the bottom of the "Company Information - Edit" screen and click "Edit".
- In the "Single Sign-On (SAML 2.0) Settings" section, select "Use", configure the settings as follows, and save by clicking "Update".
Identity Provider Name Any name of your choice Note: In this example, "TrustLogin" is used. Application ID Copy and make a note of it Response URL Copy and make a note of it Endpoint URL Enter the "Identity Provider URL" you noted from TrustLogin Redirect URL After Logout https://portal.trustlogin.com/ Certificate Copy and paste the contents of the "certificate" you downloaded from TrustLogin Allow Normal Login for All Users Checking this enables normal login (login using an ID and password).
If you want to restrict login to SSO only, we recommend unchecking this only after confirming SSO works successfully and notifying users.
You can also individually select which users are allowed to use normal login.
Return to the TrustLogin Admin Page again.
TrustLogin Admin Page Settings (Continued)
- Configure "Service Provider Settings" as follows.
Entity ID The "Application ID" you noted from Ashita no Cloud Value for Name ID Set to "Custom Attribute > the custom attribute name you configured" ACS URL to Service The "Response URL" you noted from Ashita no Cloud
- Save by clicking the "Register" button.
TrustLogin User Settings
① When a User Adds the App from My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Ashita no Cloud (SAML)" and click the "Next" button in the upper right of the screen.
- If you want to change the "Display Name", enter it and click the "Register" button.
②When an Administrator Adds Members
- Search for and click the "Ashita no Cloud (SAML)" app in the "Admin Page > App" menu.
- Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.