How to Configure SAML Authentication for Kuroco

 Item

Details 

Prerequisites

  • Prior configuration on Kuroco is required.

  • You must create an account in Kuroco using the same email address as in TrustLogin.

  • For the latest configuration steps, please refer to the manual provided by Kuroco.

Name ID

Email address

 

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Settings

Configured by the administrator

 

Request configuration from the SP

Provisioning

 

Supports provisioning via API (account management possible in TrustLogin)

 

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (accounts created in each system)
Note: For configuration steps to enable provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

 

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Kuroco (SAML)".
    Kuroco.png

  3. Note down the values of "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.
    03.png

  4. Convert the downloaded certificate's file extension to ".cer".

 

At this point, switch to configuring the Kuroco side.
Do not click the "Register" button yet — open the Kuroco admin screen in a separate window.

Kuroco Configuration

  1. From the left menu, select "External System Integration > SAML SP" and click the "Add" button.
    04.png

  2. Configure each item as follows, and finally save by clicking the "Add" button.
    Login SAML SP Name Set any name of your choice
    Target Domain Specify the page to redirect to after login
    Entity ID Set any string of your choice
    XML Configuration File for IDP Click "Don't have a configuration file? Click here."
    Certificate The "Certificate" obtained from TrustLogin (converted to a CER file)
    IDP URL The "IdP URL" obtained from TrustLogin
    IDP Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Expiration Date Set any date and time of your choice
    Use Login ID Turn the checkbox OFF
    Automatic User Registration Turn the checkbox OFF
    Allow IDP-Initiated Flow Turn the checkbox ON
    Binding Method Select "POST"

    05.png

  3. Click the SAML SP configuration you created.
    06.png

  4. Upload the "Certificate" obtained from TrustLogin to "Certificate" again,
    and obtain the metadata from "Download Metadata."
    Finally, update by clicking the "Update" button.
    09.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. In "Service Provider Settings," upload the "Metadata" obtained from Kuroco to "Metadata."
    08.png

  2. Click the "Register" button to save.

 

TrustLogin User Configuration

① When Users Add the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Kuroco (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When Administrators Add Members

  1. In the "Admin Page > Apps" menu, search for and click the "Kuroco (SAML)" app.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.

 

How to Configure SAML Authentication for Kuroco

 Item

Details 

Prerequisites

  • Prior configuration on Kuroco is required.

  • You must create an account in Kuroco using the same email address as in TrustLogin.

  • For the latest configuration steps, please refer to the manual provided by Kuroco.

Name ID

Email address

 

Custom attribute Note: For instructions on how to configure custom attributes, see here

SP-side Settings

Configured by the administrator

 

Request configuration from the SP

Provisioning

 

Supports provisioning via API (account management possible in TrustLogin)

 

Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not supported)

None (accounts created in each system)
Note: For configuration steps to enable provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Verification Status by Device

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

 

TrustLogin Admin Page Configuration

  1. Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Corporate App" screen and select "Kuroco (SAML)".
    Kuroco.png

  3. Note down the values of "IdP URL" and "Issuer/Entity ID" under "Identity Provider Information," and download the certificate using the "Get Certificate" button.
    03.png

  4. Convert the downloaded certificate's file extension to ".cer".

 

At this point, switch to configuring the Kuroco side.
Do not click the "Register" button yet — open the Kuroco admin screen in a separate window.

Kuroco Configuration

  1. From the left menu, select "External System Integration > SAML SP" and click the "Add" button.
    04.png

  2. Configure each item as follows, and finally save by clicking the "Add" button.
    Login SAML SP Name Set any name of your choice
    Target Domain Specify the page to redirect to after login
    Entity ID Set any string of your choice
    XML Configuration File for IDP Click "Don't have a configuration file? Click here."
    Certificate The "Certificate" obtained from TrustLogin (converted to a CER file)
    IDP URL The "IdP URL" obtained from TrustLogin
    IDP Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Expiration Date Set any date and time of your choice
    Use Login ID Turn the checkbox OFF
    Automatic User Registration Turn the checkbox OFF
    Allow IDP-Initiated Flow Turn the checkbox ON
    Binding Method Select "POST"

    05.png

  3. Click the SAML SP configuration you created.
    06.png

  4. Upload the "Certificate" obtained from TrustLogin to "Certificate" again,
    and obtain the metadata from "Download Metadata."
    Finally, update by clicking the "Update" button.
    09.png

Return to the TrustLogin Admin Page again.

TrustLogin Admin Page Configuration (Continued)

  1. In "Service Provider Settings," upload the "Metadata" obtained from Kuroco to "Metadata."
    08.png

  2. Click the "Register" button to save.

 

TrustLogin User Configuration

① When Users Add the App from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Kuroco (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name," enter it, then click the "Register" button.

② When Administrators Add Members

  1. In the "Admin Page > Apps" menu, search for and click the "Kuroco (SAML)" app.
  2. Click "Add Member," select the user to add from the member list, and click the "Register" button to add them.