GROWI.cloud SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in GROWI.cloud is required.

  • The user's last name and first name are synced only when a new user is created.

  • Please refer to the manual provided by GROWI.cloud for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "GROWI.cloud (SAML)".
    GROWI.png

  3. Note the value of "IdP URL" under "Identity Provider Information", and download the certificate from the "Get Certificate" button.
    03.png

Now, switch to configuring GROWI.cloud.
Do not click the "Register" button yet — open GROWI.cloud in a separate window.

GROWI.cloud Settings

  1. Open the admin screen and turn on "Enable SAML" under "Security Settings > Authentication Mechanism Settings > SAML".
    04.png

  2. Configure the "Callback URL" and "Basic Settings" items as follows.
    Callback URL Note down the value
    Entry Point The "IdP URL" obtained from TrustLogin
    Issuer Set any string and note it down
    Certificate The contents of the "Certificate" obtained from TrustLogin

    05.png

  3. Configure the "Attribute Mapping" items as follows.
    ID email
    Username username
    Email Address email
    First Name firstName
    Last Name lastName

    06.png

  4. Check "On new login, if a local account with a matching email address exists, automatically link it" under "Attribute Mapping Options", and finally save the settings by clicking the "Update" button.
    07.png

Now return to the TrustLogin admin page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The value set for GROWI.cloud's "Issuer"
    ACS URL to Service The "Callback URL" obtained from GROWI.cloud

    08.png

  2. Click the "Save" button to save your settings.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "GROWI.cloud (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "GROWI.cloud (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.

GROWI.cloud SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in GROWI.cloud is required.

  • The user's last name and first name are synced only when a new user is created.

  • Please refer to the manual provided by GROWI.cloud for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "GROWI.cloud (SAML)".
    GROWI.png

  3. Note the value of "IdP URL" under "Identity Provider Information", and download the certificate from the "Get Certificate" button.
    03.png

Now, switch to configuring GROWI.cloud.
Do not click the "Register" button yet — open GROWI.cloud in a separate window.

GROWI.cloud Settings

  1. Open the admin screen and turn on "Enable SAML" under "Security Settings > Authentication Mechanism Settings > SAML".
    04.png

  2. Configure the "Callback URL" and "Basic Settings" items as follows.
    Callback URL Note down the value
    Entry Point The "IdP URL" obtained from TrustLogin
    Issuer Set any string and note it down
    Certificate The contents of the "Certificate" obtained from TrustLogin

    05.png

  3. Configure the "Attribute Mapping" items as follows.
    ID email
    Username username
    Email Address email
    First Name firstName
    Last Name lastName

    06.png

  4. Check "On new login, if a local account with a matching email address exists, automatically link it" under "Attribute Mapping Options", and finally save the settings by clicking the "Update" button.
    07.png

Now return to the TrustLogin admin page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Entity ID The value set for GROWI.cloud's "Issuer"
    ACS URL to Service The "Callback URL" obtained from GROWI.cloud

    08.png

  2. Click the "Save" button to save your settings.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "GROWI.cloud (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Save" button.

②When an administrator adds members

  1. Search for and click the "GROWI.cloud (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Save" button to add them.