mabl SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in mabl is required.

  • When logging in via SSO, a new mabl user and workspace are automatically created.

  • When a new user is created via SAML JIT, the user's "last name," "first name," and "email address" are synced. Automatic updates do not occur from the second login onward.

  • Please refer to the manual provided by mabl for the latest configuration steps.

Name ID

〇

Email address

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

〇

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)
〇

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

〇

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

Note: If you are using client authentication, SSO is not available on PC - Desktop App.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "mabl (SAML)".
    mabl.png


  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".03.png

  4. Click the "Save" button to save your settings.

  5. Send the following information to your mabl representative and request SAML configuration. In return, you will receive mabl's Single Sign-On URL and Audience URI.
    Metadata The metadata you noted from TrustLogin
    Domain The domain name of the email address for which SSO is being configured
    Whether Domain Lock Is Enabled If you enable domain lock, password login will no longer be possible. For details, see here.

  6. Once mabl notifies you that the SAML configuration is complete, open "App Management Screen > Change SAML App Settings" and configure the service provider settings.
    Entity ID The "Audience URI" sent by mabl
    ACS URL of the Service The "Single Sign-On URL" sent by mabl

    mabl.png

  7. Click the "Save" button to save your settings.

  8. Add the user who is currently performing the SAML configuration (a user with the domain for which SSO was configured) to the "mabl (SAML)" app.
    Search for the "mabl (SAML)" app from "Admin Page > App" and add the user via "Add Member".

  9. Notify your mabl representative that the SAML configuration is complete, and you will receive a test login URL. Access the URL and verify that SSO succeeds. Once SSO succeeds, report this to mabl to begin full SSO operation.
    Note: At the point when you receive the test login URL, you will not be able to log in from other URLs (such as https://app.mabl.com/login etc.).

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "mabl (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "mabl (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.
Was this article helpful?
  1. ホーム
  2. SAML JIT App Configuration
  3. mabl SAML JIT Setup Guide

mabl SAML JIT Setup Guide

GMOトラスト・ログインチーム
  • Updated

Item

Details

Pre-check

  • Prior configuration in mabl is required.

  • When logging in via SSO, a new mabl user and workspace are automatically created.

  • When a new user is created via SAML JIT, the user's "last name," "first name," and "email address" are synced. Automatic updates do not occur from the second login onward.

  • Please refer to the manual provided by mabl for the latest configuration steps.

Name ID

〇

Email address

Custom attribute　Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

〇

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)
〇

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

〇

SP-Initiated SSO

〇

IdP-Initiated SSO

Device Compatibility

〇

PC - Browser

〇

PC - Desktop App

〇

iOS - Standard Browser (Safari)

〇

iOS - TrustLogin Mobile App In-App Browser

ー

iOS - Native App

〇

Android - Standard Browser (Chrome)

〇

Android - TrustLogin Mobile App In-App Browser

ー

Android - Native App

Note: If you are using client authentication, SSO is not available on PC - Desktop App.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "mabl (SAML)".
    mabl.png


  3. Download the metadata from the "Download Metadata" button under "Identity Provider Information".03.png

  4. Click the "Save" button to save your settings.

  5. Send the following information to your mabl representative and request SAML configuration. In return, you will receive mabl's Single Sign-On URL and Audience URI.
    Metadata The metadata you noted from TrustLogin
    Domain The domain name of the email address for which SSO is being configured
    Whether Domain Lock Is Enabled If you enable domain lock, password login will no longer be possible. For details, see here.

  6. Once mabl notifies you that the SAML configuration is complete, open "App Management Screen > Change SAML App Settings" and configure the service provider settings.
    Entity ID The "Audience URI" sent by mabl
    ACS URL of the Service The "Single Sign-On URL" sent by mabl

    mabl.png

  7. Click the "Save" button to save your settings.

  8. Add the user who is currently performing the SAML configuration (a user with the domain for which SSO was configured) to the "mabl (SAML)" app.
    Search for the "mabl (SAML)" app from "Admin Page > App" and add the user via "Add Member".

  9. Notify your mabl representative that the SAML configuration is complete, and you will receive a test login URL. Access the URL and verify that SSO succeeds. Once SSO succeeds, report this to mabl to begin full SSO operation.
    Note: At the point when you receive the test login URL, you will not be able to log in from other URLs (such as https://app.mabl.com/login etc.).

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "mabl (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "mabl (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.