Kuroco SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Kuroco is required.

  • The user's last name and first name are synced only when a new user is registered.

  • Please refer to the manual provided by Kuroco for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Kuroco (SAML)".
    Kuroco.png

  3. Note down the "Identity Provider URL" and "Issuer/Entity ID" values under "Identity Provider Information", then download the certificate from the "Get Certificate" button.
    03.png


  4. Convert the file extension of the downloaded certificate to ".cer".

Now, switch to configuring Kuroco.
Do not click the "Register" button yet — open the Kuroco admin screen in a separate window.

Kuroco Settings

  1. Select "External System Integration > SAML SP" from the left menu and click the "Add" button.
    04.png

  2. Configure each item as follows, and finally save by clicking the "Add" button.
    Login SAML SP Name Set any name you like
    Target Domain Specify the page to redirect to after login
    Entity ID Set any string you like
    IDP XML Configuration File Click "Don't have a configuration file? Click here."
    Certificate The "Certificate" obtained from TrustLogin (converted to a CER file)
    IDP URL The "Identity Provider URL" obtained from TrustLogin
    IDP Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Expiration Date Set any date and time you like
    Use Login ID Turn the checkbox OFF
    Automatic User Registration Turn the checkbox ON
    Select the group to assign to the user upon new registration
    Allow IDP-Initiated Flow Turn the checkbox ON
    Binding Method Select "POST"

    05_jit.png

  3. Click the SAML SP configuration you created.
    06.png

  4. Upload the "Certificate" obtained from TrustLogin to "Certificate" again, and
    get the metadata from "Download Metadata".
    Finally, update by clicking the "Update" button.
    09_jit.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the "Metadata" obtained from Kuroco to "Metadata" under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Kuroco (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Kuroco (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Kuroco SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Kuroco is required.

  • The user's last name and first name are synced only when a new user is registered.

  • Please refer to the manual provided by Kuroco for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JITProvisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Kuroco (SAML)".
    Kuroco.png

  3. Note down the "Identity Provider URL" and "Issuer/Entity ID" values under "Identity Provider Information", then download the certificate from the "Get Certificate" button.
    03.png


  4. Convert the file extension of the downloaded certificate to ".cer".

Now, switch to configuring Kuroco.
Do not click the "Register" button yet — open the Kuroco admin screen in a separate window.

Kuroco Settings

  1. Select "External System Integration > SAML SP" from the left menu and click the "Add" button.
    04.png

  2. Configure each item as follows, and finally save by clicking the "Add" button.
    Login SAML SP Name Set any name you like
    Target Domain Specify the page to redirect to after login
    Entity ID Set any string you like
    IDP XML Configuration File Click "Don't have a configuration file? Click here."
    Certificate The "Certificate" obtained from TrustLogin (converted to a CER file)
    IDP URL The "Identity Provider URL" obtained from TrustLogin
    IDP Entity ID The "Issuer/Entity ID" obtained from TrustLogin
    Expiration Date Set any date and time you like
    Use Login ID Turn the checkbox OFF
    Automatic User Registration Turn the checkbox ON
    Select the group to assign to the user upon new registration
    Allow IDP-Initiated Flow Turn the checkbox ON
    Binding Method Select "POST"

    05_jit.png

  3. Click the SAML SP configuration you created.
    06.png

  4. Upload the "Certificate" obtained from TrustLogin to "Certificate" again, and
    get the metadata from "Download Metadata".
    Finally, update by clicking the "Update" button.
    09_jit.png

Now return to the TrustLogin Admin Page again.

TrustLogin Admin Page Settings (Continued)

  1. Upload the "Metadata" obtained from Kuroco to "Metadata" under "Service Provider Settings".
    08.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Kuroco (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Kuroco (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.