|
Item |
Details |
|
|---|---|---|
|
Prior Confirmation |
|
|
|
Name ID |
〇 |
Email address |
|
Custom attribute Note: For how to configure custom attributes, see here |
||
|
SP-side Configuration |
〇 |
Configured by the administrator |
|
Request configuration from the SP |
||
|
Provisioning |
Supports provisioning via API (account management possible in TrustLogin) |
|
|
Supports SAML JIT provisioning (account management possible in TrustLogin; user deletion not possible) |
||
|
〇 |
None (accounts created in each system) |
|
|
Access Method |
〇 |
SP-Initiated SSO |
|
〇 |
IdP-Initiated SSO |
|
|
Verification Status by Device |
〇 |
PC - Browser |
|
ー |
PC - Desktop App |
|
|
〇 |
iOS - Standard Browser (Safari) |
|
|
〇 |
iOS - TrustLogin Mobile App Internal Browser |
|
|
〇 |
iOS - Native App |
|
|
〇 |
Android - Standard Browser (Chrome) |
|
|
〇 |
Android - TrustLogin Mobile App Internal Browser |
|
|
〇 |
Android - Native App |
|
Note: If you are using client authentication, SSO is not available for iOS - Native App or Android - Native App.
TrustLogin Admin Page Configuration
-
Log in to TrustLogin, open the "Admin Page > Apps" menu, and click the "Register App" button at the top right of the screen.
- On the "Register Corporate App" screen, search and select "Canbus. (SAML)".
- Note down the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
- Convert the extension of the downloaded certificate to ".crt".
-
In the "Service Provider Settings" section, enter your Canbus. tenant ID in the "Entity ID" and "ACS URL for Service" input fields.
- Save by clicking the "Register" button.
Canbus. Configuration
- Log in with an administrator account, open "Admin > System Administration > Authentication", and configure each item as follows.
Enable login using SAML 2.0 Identity Provider Check the box Login Page URL The "Identity Provider URL" obtained from TrustLogin Identity Provider Certificate The "Certificate" obtained from TrustLogin, converted
to Crt format
Login Button Label (Optional) The label name for the SSO button on the login page
- Save the configuration by clicking the "Save" button.
TrustLogin User Configuration
① When Users Add the App via My Page
- Click the "Add App" button on "My Page".
- On the "Register App" screen, select "Canbus. (SAML)" and click the "Next" button at the top right of the screen.
- Enter a value if you want to change the "Display Name", then click the "Register" button.
② When an Administrator Adds Members
- Search for the "Canbus. (SAML)" app in the "Admin Page > Apps" menu and click it.
- Click "Add Member", select the users to add from the member list, and click the "Register" button to add them.