How to Configure SAML Authentication for eTransporter

Item

Details

Pre-check

  • Pre-configuration is required in eTransporter.

  • You must create an account in eTransporter using the same email address as your TrustLogin account.

  • This manual was created based on verification using the on-premises version of eTransporter.
  • After completing the setup according to the steps in this manual, SAML login will also be available for the Admin screen. Please access the administrator URL to log in via SAML.
  • For the latest configuration steps, please refer to the manual provided by eTransporter.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)
Note: For how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "eTransporter (SAML)".
    eTransporter01.png

  3. Under "Identity Provider Information", note down the values of "Identity Provider URL" and "Issuer / Entity ID", and download the certificate using the "Get Certificate" button.03.png


Now, let's move on to the settings on the eTransporter side.
Do not click the "Register" button, and open eTransporter in a separate window.

eTransporter Settings

  1. Log in to the eTransporter Admin screen and open "Advanced Settings".eTransporter02.png

  2. Select "SAML Authentication Settings".
    eTransporter03.png

  3. Select "General SAML Authentication".
    eTransporter04.png

  4. Configure the settings as follows, then click "Update".
    Enable/Disable SAML Authentication Enabled
    (SAML Authentication) IP Segment Range Set as needed 
    Note: Set the IP addresses from which SAML authentication can be used.
    Only access from within the specified range will display the authentication link on the login screen. If left blank, there is no restriction.
    (SAML Authentication) IdP Identifier (Issuer) The "Issuer / Entity ID" you noted from TrustLogin
    (SAML Authentication) Endpoint URL The "Identity Provider URL" you noted from TrustLogin
    (SAML Authentication) Authentication Type Email address
    (SAML Authentication) SP Identifier (Issuer)

    Change the "localhost" portion of the URL to your company's eTransporter FQDN
    Copy the updated URL and keep a note of it

    (SAML Authentication) SP Response URL Change the "localhost" portion of the URL to your company's eTransporter FQDN
    Copy the updated URL and keep a note of it
    (SAML Authentication) Signature Verification Certificate Paste the contents of the "Certificate" you noted from TrustLogin
    Enable/Disable SAML Provisioning Disabled
    (SAML Provisioning) Claim Name Mapped to User ID Userid
    (SAML Provisioning) Claim Name Mapped to Username Username
    (SAML Provisioning) Claim Name Mapped to Email Address Email
    (SAML Provisioning) Claim Name Mapped to Department Department
    (SAML Provisioning) Affiliated Group

    Specify the group ID that the user will belong to when a new user is created via SAML JIT.

    Note: If the user belongs to multiple groups, enter them separated by commas.

    Note: The provisioning configuration items are required to be entered, but provisioning is not performed in this manual.

    eTransporter05.png

    eTransporter06.png
    eTransporter14.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL

    The user login URL for eTransporter

    Example: https://xxxx.△△△△.net

    Entity ID The "SP Identifier (Issuer)" you noted from eTransporter
    ACS URL for the Service The "SP Response URL" you noted from eTransporter

    eTra.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "eTransporter (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "eTransporter (SAML)" app.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

How to Configure SAML Authentication for eTransporter

Item

Details

Pre-check

  • Pre-configuration is required in eTransporter.

  • You must create an account in eTransporter using the same email address as your TrustLogin account.

  • This manual was created based on verification using the on-premises version of eTransporter.
  • After completing the setup according to the steps in this manual, SAML login will also be available for the Admin screen. Please access the administrator URL to log in via SAML.
  • For the latest configuration steps, please refer to the manual provided by eTransporter.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the Administrator

Request SP to configure

Provisioning

API-based Provisioning supported (Account management available in TrustLogin)

SAML JIT Provisioning supported (Account management available in TrustLogin; user deletion not available)

None (accounts created in each system)
Note: For how to configure provisioning, see here

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Default Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Default Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "eTransporter (SAML)".
    eTransporter01.png

  3. Under "Identity Provider Information", note down the values of "Identity Provider URL" and "Issuer / Entity ID", and download the certificate using the "Get Certificate" button.03.png


Now, let's move on to the settings on the eTransporter side.
Do not click the "Register" button, and open eTransporter in a separate window.

eTransporter Settings

  1. Log in to the eTransporter Admin screen and open "Advanced Settings".eTransporter02.png

  2. Select "SAML Authentication Settings".
    eTransporter03.png

  3. Select "General SAML Authentication".
    eTransporter04.png

  4. Configure the settings as follows, then click "Update".
    Enable/Disable SAML Authentication Enabled
    (SAML Authentication) IP Segment Range Set as needed 
    Note: Set the IP addresses from which SAML authentication can be used.
    Only access from within the specified range will display the authentication link on the login screen. If left blank, there is no restriction.
    (SAML Authentication) IdP Identifier (Issuer) The "Issuer / Entity ID" you noted from TrustLogin
    (SAML Authentication) Endpoint URL The "Identity Provider URL" you noted from TrustLogin
    (SAML Authentication) Authentication Type Email address
    (SAML Authentication) SP Identifier (Issuer)

    Change the "localhost" portion of the URL to your company's eTransporter FQDN
    Copy the updated URL and keep a note of it

    (SAML Authentication) SP Response URL Change the "localhost" portion of the URL to your company's eTransporter FQDN
    Copy the updated URL and keep a note of it
    (SAML Authentication) Signature Verification Certificate Paste the contents of the "Certificate" you noted from TrustLogin
    Enable/Disable SAML Provisioning Disabled
    (SAML Provisioning) Claim Name Mapped to User ID Userid
    (SAML Provisioning) Claim Name Mapped to Username Username
    (SAML Provisioning) Claim Name Mapped to Email Address Email
    (SAML Provisioning) Claim Name Mapped to Department Department
    (SAML Provisioning) Affiliated Group

    Specify the group ID that the user will belong to when a new user is created via SAML JIT.

    Note: If the user belongs to multiple groups, enter them separated by commas.

    Note: The provisioning configuration items are required to be entered, but provisioning is not performed in this manual.

    eTransporter05.png

    eTransporter06.png
    eTransporter14.png

Now, return to the TrustLogin Admin Page.

TrustLogin Admin Page Settings (Continued)

  1. Configure "Service Provider Settings" as follows.
    Login URL

    The user login URL for eTransporter

    Example: https://xxxx.△△△△.net

    Entity ID The "SP Identifier (Issuer)" you noted from eTransporter
    ACS URL for the Service The "SP Response URL" you noted from eTransporter

    eTra.png

  2. Save by clicking the "Register" button.

TrustLogin User Settings

① When a User Adds the App from My Page

  1. On "My Page", click the "Add App" button.
  2. On the "Register App" screen, select "eTransporter (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

② When an Administrator Adds Members

  1. In the "Admin Page > App" menu, search for and click the "eTransporter (SAML)" app.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.