Canbus. SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Canbus. is required.

  • When a new user is created via SAML JIT, the login ID is set to the TrustLogin email address. If a user already registered in Canbus. has a login ID set to a string other than their email address, it will not be overwritten.
  • The user's first and last name are synced only when a new user is created via SAML JIT.

  • Please refer to the manual provided by Canbus. for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: If you are using client authentication, SSO is not available on the iOS - Native App or Android - Native App.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Canbus. (SAML)".
    02.png

  3. Note down the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png


  4. Convert the file extension of the downloaded certificate to ".crt".

  5. In the "Service Provider Settings" section, enter your Canbus. tenant ID in the "Entity ID" and "ACS URL to Service" fields.
    05.png
  6. Save by clicking the "Register" button.

Canbus. Settings

  1. Log in with an administrator account, open "Admin > System Administration > Authentication", and configure each item as follows.
    Enable login using SAML 2.0 identity provider Check the box
    Login page URL The "Identity Provider URL" obtained from TrustLogin
    Identity provider certificate

    The "certificate" obtained from TrustLogin, converted to Crt

    format

    Login button label (optional) Label for the SSO button on the login page
    Enable automatic user provisioning Check the box

    04jit.png

  2. Save the settings by clicking the "Save" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Canbus. (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Canbus. (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.

Canbus. SAML JIT Setup Guide

Item

Details

Pre-check

  • Prior configuration in Canbus. is required.

  • When a new user is created via SAML JIT, the login ID is set to the TrustLogin email address. If a user already registered in Canbus. has a login ID set to a string other than their email address, it will not be overwritten.
  • The user's first and last name are synced only when a new user is created via SAML JIT.

  • Please refer to the manual provided by Canbus. for the latest configuration steps.

Name ID

Email address

Custom attribute Note: For how to configure custom attributes, see here

SP Configuration

Configured by the administrator

Request SP to configure

Provisioning

API-based Provisioning supported (account management available in TrustLogin)

SAML JIT Provisioning supported (account management available in TrustLogin; user deletion not supported)
Note: For setup instructions when provisioning is not required, see here

None (accounts created in each system)

Access Method

SP-Initiated SSO

IdP-Initiated SSO

Device Compatibility

PC - Browser

PC - Desktop App

iOS - Standard Browser (Safari)

iOS - TrustLogin Mobile App In-App Browser

iOS - Native App

Android - Standard Browser (Chrome)

Android - TrustLogin Mobile App In-App Browser

Android - Native App

Note: If you are using client authentication, SSO is not available on the iOS - Native App or Android - Native App.

TrustLogin Admin Page Settings

  1. Log in to TrustLogin, open the "Admin Page > App" menu, and click the "Register App" button in the upper right of the screen.
    01.png

  2. Search on the "Register Company App" screen and select "Canbus. (SAML)".
    02.png

  3. Note down the value of "Identity Provider URL" under "Identity Provider Information", and download the certificate using the "Get Certificate" button.
    03.png


  4. Convert the file extension of the downloaded certificate to ".crt".

  5. In the "Service Provider Settings" section, enter your Canbus. tenant ID in the "Entity ID" and "ACS URL to Service" fields.
    05.png
  6. Save by clicking the "Register" button.

Canbus. Settings

  1. Log in with an administrator account, open "Admin > System Administration > Authentication", and configure each item as follows.
    Enable login using SAML 2.0 identity provider Check the box
    Login page URL The "Identity Provider URL" obtained from TrustLogin
    Identity provider certificate

    The "certificate" obtained from TrustLogin, converted to Crt

    format

    Login button label (optional) Label for the SSO button on the login page
    Enable automatic user provisioning Check the box

    04jit.png

  2. Save the settings by clicking the "Save" button.

TrustLogin User Settings

① When a user adds the app from My Page

  1. Click the "Add App" button on "My Page".
  2. On the "Register App" screen, select "Canbus. (SAML)" and click the "Next" button in the upper right of the screen.
  3. If you want to change the "Display Name", enter it and click the "Register" button.

②When an administrator adds members

  1. Search for and click the "Canbus. (SAML)" app in the "Admin Page > App" menu.
  2. Click "Add Member", select the user to add from the member list, and click the "Register" button to add them.