Item	Details
Pre-check	Prior configuration in eTransporter is required. The user's "User ID", "User Name", and "Department" are synced only when a new eTransporter account is created. They are not synced on subsequent logins. This manual was created based on verification with the on-premises version of eTransporter. Please refer to the manual provided by eTransporter for the latest configuration steps.
Name ID	〇	Email address
		Custom attribute　Note: For how to configure custom attributes, see here
SP Configuration	〇	Configured by the administrator
		Request SP to configure
Provisioning		API-based Provisioning supported (account management available in TrustLogin)
	〇	SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported) Note: For setup instructions when provisioning is not required, see here
		None (accounts created in each system)
Access Method	〇	SP-Initiated SSO
		IdP-Initiated SSO
Device Compatibility	〇	PC - Browser
	ー	PC - Desktop App
	〇	iOS - Standard Browser (Safari)
	〇	iOS - TrustLogin Mobile App In-App Browser
	ー	iOS - Native App
	〇	Android - Standard Browser (Chrome)
	〇	Android - TrustLogin Mobile App In-App Browser
	ー	Android - Native App

Prerequisites

When a user is created via SAML JIT, the "User ID", "User Name", "Email Address", and "Department" are synced to eTransporter. You need to set up a custom attribute in advance in order to link eTransporter's "User ID" and "User Name" to the TrustLogin member information.

Note: The attribute name can be anything you choose.

[TrustLogin Custom Attribute Configuration Example]

Please refer to the following pages for instructions on how to configure custom attributes.

• Custom Attribute Setup (Individual Registration)
• Custom Attribute Setup (Bulk Registration)

TrustLogin Admin Page Settings

1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register SAML App" button in the upper right of the screen.
   
   
   
   
2. Register the "Application Name" and "Icon" (optional).
   
   
   
3. Note down the values of "Identity Provider URL" and "Issuer/Entity ID" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.

Now, switch to configuring the eTransporter settings.
Do not click the "Register" button yet — open eTransporter in a separate window.

eTransporter Settings

1. Log in to the eTransporter admin screen and open "Detailed Settings".
   
   
2. Select "SAML Authentication Settings".
   
   
   
3. Select "General SAML Authentication".
   
   
   
4. Configure as follows and click "Update".
   

   Enable/Disable SAML Authentication	Enabled
   (SAML Authentication) IP Segment Range	Configure as needed　 Note: Set the IP addresses that can use SAML authentication. The authentication link will only appear on the login screen for access from within the specified range. If left blank, there is no restriction.
   (SAML Authentication) IdP Identifier (Issuer)	The "Issuer/Entity ID" noted down from TrustLogin
   (SAML Authentication) Endpoint URL	The "Identity Provider URL" noted down from TrustLogin
   (SAML Authentication) Authentication Type	Email address
   (SAML Authentication) SP Identifier (Issuer)	Change the "localhost" portion of the URL to your eTransporter's FQDN Copy the updated URL and keep it for later use
   (SAML Authentication) SP Response URL	Change the "localhost" portion of the URL to your eTransporter's FQDN Copy the updated URL and keep it for later use
   (SAML Authentication) Signature Verification Certificate	Paste the contents of the "certificate" noted down from TrustLogin
   Enable/Disable SAML Provisioning	Enabled
   (SAML Provisioning) Claim Name Linked to User ID	Userid
   (SAML Provisioning) Claim Name Linked to User Name	Username
   (SAML Provisioning) Claim Name Linked to Email Address	Email
   (SAML Provisioning) Claim Name Linked to Department	Department
   (SAML Provisioning) Group Membership	Specify the group ID that the user will belong to when a new user is created via SAML JIT. Note: If the user belongs to multiple groups, enter them separated by commas.

   
   
   
   
   

Return to the TrustLogin admin page again.

TrustLogin Admin Page Settings (Continued)

1. Configure "Service Provider Settings" as follows.
   

   Login URL	The SAML login URL for eTransporter users Example: https://xxxx.△△△△.net/eTransporter/sso/SamlLogin?configId=general
   Sign the SAML response	Check the box
   Value for Name ID	[Member]-[email]
   Entity ID	The "SP Identifier (Issuer)" noted down from eTransporter
   Name ID Format	unspecified
   ACS URL to Service	The "SP Response URL" noted down from eTransporter

   
   
   
   
2. Add a row (attribute) using the "Add SAML Attribute" button in "SAML Attribute Settings", and configure it as follows.
   

   Service Provider Attribute			TrustLogin (IdP) Attribute
   Attribute Name	Attribute Type	Attribute Name		Attribute Value
   Email	Unspecified	Email	Member	Member Email Address
   Department	Unspecified	Department	Member	Member Department
   Userid	Unspecified	Userid	Custom Attribute	The attribute name you configured
   Username	Unspecified	Username	Custom Attribute	The attribute name you configured

   
   
   
3. Save by clicking the "Register" button.

TrustLogin User Settings

① When a user adds the app from My Page

1. Click the "Add App" button on "My Page".
2. On the "Register App" screen, select the custom SAML app you created, and click the "Next" button in the upper right of the screen.
3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

1. Search for and click the custom SAML app you created in the "Admin Page > App" menu.
2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.